the-djmaze/snappymail
1
1
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2024-09-20 15:45:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Resolve #972

Browse source
This commit is contained in:
the-djmaze 2023-02-16 16:08:05 +01:00
parent e4e12bdaa9
commit a9eff27f99
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
dev/Common/Html.js
View file

@ -240,7 +240,7 @@ export const
'colspan', 'rowspan', 'headers'
],
disallowedTags = [
'SVG','SCRIPT','TITLE','LINK','BASE','META',
'SCRIPT','TITLE','LINK','BASE','META',
'INPUT','OUTPUT','SELECT','BUTTON','TEXTAREA',
'BGSOUND','KEYGEN','SOURCE','OBJECT','EMBED','APPLET','IFRAME','FRAME','FRAMESET','VIDEO','AUDIO','AREA','MAP'
// Not supported by <template> element
@ -279,6 +279,9 @@ export const
nodeIterator.referenceNode.remove();
}
// https://github.com/the-djmaze/snappymail/issues/972
tpl.content.querySelectorAll('SVG').forEach(oElement => oElement.remove());
if (0 < bqLevel) {
tpl.content.querySelectorAll(new Array(1 + bqLevel).fill('blockquote').join(' ')).forEach(node => node.remove());
}