Check for enabling scripts or popups

2020-12-11 10:02:23 +00:00 · 2020-12-11 10:02:23 +00:00 · af76a5809e
parent 5da576965f
commit af76a5809e
1 changed files with 1 additions and 1 deletions
--- a/content.py
+++ b/content.py
@ -166,7 +166,7 @@ def dangerousMarkup(content: str, allowLocalNetworkAccess: bool) -> bool:
        invalidPartials = ('127.0.', '192.168', '10.0.')
    invalidStrings = ('script', 'canvas', 'style', 'abbr',
                      'frame', 'iframe', 'html', 'body',
-                      'hr')
+                      'hr', 'allow-popups', 'allow-scripts')
    for markup in contentSections:
        if '>' not in markup:
            continue