Skip to content
This repository has been archived by the owner on Apr 3, 2024. It is now read-only.

Fix injection vulnerabilities #445

Merged
merged 1 commit into from Feb 14, 2020
Merged

Commits on Feb 14, 2020

  1. Fix injection vulnerabilities

    * fix: fixing injection vulnerabilities in render
    
    * fix: removed style attribute support on img elements
    
    * fix: added validation of iframe url hostnames
    
    * fix: fixed fixture to use urls that are parseable by url.parse
    
    * fix: removed brittle regex and added literal string matching for hostnames
    
    * fix: removed node 6 support
    
    * fix: added fixture for style attribute removal
    
    * fix: added test for style attribute removal from img elements
    Andre Eleuterio committed Feb 14, 2020
    Configuration menu
    Copy the full SHA
    74e4b9d View commit details
    Browse the repository at this point in the history