Forbit input within markup

main
Bob Mottram 2022-09-09 18:49:03 +01:00
parent bed15feb14
commit 48db4f58a4
1 changed files with 1 additions and 1 deletions

View File

@ -1110,7 +1110,7 @@ def dangerous_markup(content: str, allow_local_network_access: bool) -> bool:
return True
invalid_strings = [
'script', 'noscript', 'pre',
'canvas', 'style', 'abbr',
'canvas', 'style', 'abbr', 'input',
'frame', 'iframe', 'html', 'body',
'hr', 'allow-popups', 'allow-scripts',
'amp-'