Check for localhost links in css

2020-12-12 20:55:33 +00:00 · 2020-12-12 20:55:33 +00:00 · 5dfd647f81
parent 249cc1ab5a
commit 5dfd647f81
1 changed files with 2 additions and 1 deletions
--- a/content.py
+++ b/content.py
@ -196,7 +196,8 @@ def dangerousCSS(filename: str, allowLocalNetworkAccess: bool) -> bool:
        content = fp.read().lower()

        cssMatches = ('behavior:', ':expression', '?php', '.php',
-                      'google')
+                      'google', 'localhost',
+                      '127.0.', '192.168', '10.0.')
        for match in cssMatches:
            if match in content:
                return True