mirror of
https://github.com/element-hq/element-web.git
synced 2024-12-03 01:14:32 +03:00
Disallow data attribute, we don't need it currently
This commit is contained in:
parent
f9ee89b2f4
commit
96f5f92c7f
1 changed files with 1 additions and 1 deletions
|
@ -153,7 +153,7 @@ const sanitizeHtmlParams = {
|
|||
allowedSchemes: ['http', 'https', 'ftp', 'mailto'],
|
||||
|
||||
allowedSchemesByTag: {
|
||||
img: [ 'data', 'mxc' ],
|
||||
img: ['mxc'],
|
||||
},
|
||||
allowProtocolRelative: false,
|
||||
|
||||
|
|
Loading…
Reference in a new issue