weirdly no, images should not have classes
ci/woodpecker/push/woodpecker Pipeline is pending Details

This commit is contained in:
FloatingGhost 2022-11-26 21:15:10 +00:00
parent 2fd45e0cb6
commit 5bb95256ee
2 changed files with 2 additions and 1 deletions

View File

@ -98,7 +98,6 @@ defmodule Pleroma.HTML.Scrubber.Default do
Meta.allow_tag_with_these_attributes(:img, [
"width",
"height",
"class",
"title",
"alt"
])

View File

@ -16,6 +16,7 @@ defmodule Pleroma.Web.ActivityPub.MRF.NormalizeMarkupTest do
this is an image: <img src="http://example.com/image.jpg"><br />
<script>alert('hacked')</script>
<div class="wow no classes here">mean</div>
<img class="hehe" src="somewhere" />
"""
@expected """
@ -27,6 +28,7 @@ defmodule Pleroma.Web.ActivityPub.MRF.NormalizeMarkupTest do
this is an image: <img src="http://example.com/image.jpg"/><br/>
alert(&#39;hacked&#39;)
mean
<img src="somewhere"/>
"""
test "it filter html tags" do