From 72fc823c517489403c0962ddc1ddf4297211f734 Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@freedombone.net>
Date: Sun, 14 Jun 2020 14:47:46 +0100
Subject: [PATCH] More html validity checks

---
 inbox.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/inbox.py b/inbox.py
index 156d33f6..6486685b 100644
--- a/inbox.py
+++ b/inbox.py
@@ -1600,7 +1600,8 @@ def validPostContent(baseDir: str, nickname: str, domain: str,
                   messageJson['object']['content']):
         return True
     # check for bad html
-    invalidStrings = ('<script>', '<canvas>', '<style>',
+    invalidStrings = ('<script>', '</script>', '</canvas>',
+                      '</style>', '</abbr>',
                       '</html>', '</body>', '<br>', '<hr>')
     for badStr in invalidStrings:
         if badStr in messageJson['object']['content']: