 jvoisin
|
87d7891600
refactor: remove the now-useless maxDepth limit in the sanitizer
|
1 month ago |
 Frédéric Guillot
|
16ff071365
feat(sanitizer): allow iframes from framatube.org
|
3 months ago |
|
Frédéric Guillot
|
293209098a
fix(sanitizer): strip inner elements of blocked iframes
|
3 months ago |
 Frédéric Guillot
|
01888d8e32
fix: run go fix
|
4 months ago |
|
jvoisin
|
7b65255757
refactor(sanitizer): handle deeply nested recursion
|
5 months ago |
|
jvoisin
|
6a9d7894d1
refactor(sanitizer): improve how attributes are sanitized
|
5 months ago |
|
Frédéric Guillot
|
5a8431b144
refactor(sanitizer): enforce isBlockedResource() on srcset URLs
|
5 months ago |
|
Frédéric Guillot
|
9e760e14cd
test(sanitizer): rewrite TestSelfClosingTags
|
5 months ago |
|
Frédéric Guillot
|
879e40670c
test: refactor TestImg and TestURIScheme
|
5 months ago |
|
Frédéric Guillot
|
acfb7dc213
test: refactor TestAttrLowerCase
|
5 months ago |
|
jvoisin
|
62f316c7cf
refactor(sanitizer): html attributes keys are always lowercase
|
5 months ago |
|
Frédéric Guillot
|
89638b448a
refactor(sanitizer): remove workaround that strip large img width attribute
|
5 months ago |
|
jvoisin
|
d8181b1f65
refactor(sanitizer): use a parser instead of a tokenizer
|
5 months ago |
|
Frédéric Guillot
|
4892e04e9b
fix: avoid YouTube error 153 for embed iframes
|
7 months ago |
|
Frédéric Guillot
|
7e2dd3afe6
fix: avoid YouTube error 153 video player configuration error
|
8 months ago |
|
Frédéric Guillot
|
5e607be86a
refactor(config): rewrite config parser
|
9 months ago |
|
jvoisin
|
485baf9654
refactor(misc): fix a handful of TODO
|
11 months ago |
 Julien Voisin
|
566670cc06
refactor: unexport symbols
|
11 months ago |
|
Frédéric Guillot
|
cb617ff6e0
test(sanitizer): enhance tests for image width and height attributes
|
1 year ago |
|
jvoisin
|
43546976d2
refactor(tests): use b.Loop() instead of for range b.N
|
1 year ago |
|
Frédéric Guillot
|
6af4d69c39
test(sanitizer): add test case to cover Vimeo iframe rewrite without query string
|
1 year ago |
|
Frédéric Guillot
|
27015a5e34
test(sanitizer): add unit test for 0x0 pixel tracker
|
1 year ago |
|
Frédéric Guillot
|
3538c4271b
refactor(sanitizer): use global variables to avoid recreating slices on every call
|
1 year ago |
|
Frédéric Guillot
|
ac44507af2
refactor(sanitizer): use a map for iframe allow list
|
1 year ago |
|
Frédéric Guillot
|
cecc18420d
feat(sanitizer): add validation for empty width and height attributes in img tags
|
1 year ago |
|
Frédéric Guillot
|
d53fd17e10
feat(sanitizer): validate MathML XML namespace
|
1 year ago |
|
Frédéric Guillot
|
21d22d7f0b
feat(sanitizer): add support for fetchpriority and decoding attributes in img tags
|
1 year ago |
|
Frédéric Guillot
|
8db637cb39
feat(ui): add user setting to control `target="_blank"` on links
|
1 year ago |
|
Frédéric Guillot
|
828a4334db
fix(sanitizer): MathML tags are not fully supported by `golang.org/x/net/html`
|
1 year ago |
|
jvoisin
|
f916373f55
fix: allow the `<b>` tag
|
1 year ago |
