Check for localhost links in css

merge-requests/30/head
Bob Mottram 2020-12-12 20:55:33 +00:00
parent 249cc1ab5a
commit 5dfd647f81
1 changed files with 2 additions and 1 deletions

View File

@ -196,7 +196,8 @@ def dangerousCSS(filename: str, allowLocalNetworkAccess: bool) -> bool:
content = fp.read().lower() content = fp.read().lower()
cssMatches = ('behavior:', ':expression', '?php', '.php', cssMatches = ('behavior:', ':expression', '?php', '.php',
'google') 'google', 'localhost',
'127.0.', '192.168', '10.0.')
for match in cssMatches: for match in cssMatches:
if match in content: if match in content:
return True return True