Forbit input within markup

main
Bob Mottram 2022-09-09 18:49:03 +01:00
parent bed15feb14
commit 48db4f58a4
1 changed files with 1 additions and 1 deletions

View File

@ -1110,7 +1110,7 @@ def dangerous_markup(content: str, allow_local_network_access: bool) -> bool:
return True return True
invalid_strings = [ invalid_strings = [
'script', 'noscript', 'pre', 'script', 'noscript', 'pre',
'canvas', 'style', 'abbr', 'canvas', 'style', 'abbr', 'input',
'frame', 'iframe', 'html', 'body', 'frame', 'iframe', 'html', 'body',
'hr', 'allow-popups', 'allow-scripts', 'hr', 'allow-popups', 'allow-scripts',
'amp-' 'amp-'