Also remove noscript markup

main
Bob Mottram 2021-05-19 12:32:31 +01:00
parent fd30083696
commit 6765f7b02f
1 changed files with 2 additions and 1 deletions

View File

@ -675,7 +675,8 @@ def dangerousMarkup(content: str, allowLocalNetworkAccess: bool) -> bool:
invalidPartials = ()
if not allowLocalNetworkAccess:
invalidPartials = getLocalNetworkAddresses()
invalidStrings = ('script', 'canvas', 'style', 'abbr',
invalidStrings = ('script', 'noscript',
'canvas', 'style', 'abbr',
'frame', 'iframe', 'html', 'body',
'hr', 'allow-popups', 'allow-scripts')
for markup in contentSections: