diff --git a/Block/XsltBlock.php b/Block/XsltBlock.php index e17e6c9..6d9876f 100644 --- a/Block/XsltBlock.php +++ b/Block/XsltBlock.php @@ -38,6 +38,13 @@ public function display(array $properties): string } else { $doc->loadXML($properties['stylecontents']); } + + // remove scripts + $scriptTags = $doc->getElementsByTagName('script'); + foreach ($scriptTags as $scriptTag) { + $scriptTag->parentNode->removeChild($scriptTag); + } + $xsl->importStyleSheet($doc); // load xml source