3 ms·
This is the correct output of the first example, confirmed in real Firefox (note also the two spaces near the end): "Some text <b><i>with</i></b> tags, inclu
by chrismorgan 6y ago
This is the correct output of the first example, confirmed in real Firefox (note also the two spaces near the end):
"Some text <b><i>with</i></b> tags, including a rogue script def."
- franciscop 6y agoOh so you are saying `<blink>` is always removed? That's right, it seems if it's not in the "allowElements" it's dropped: https://wicg.github.io/sanitizer-api/#defaults https://wicg.github.io/sanitizer-api/#defaults Edit: corrected "allowAttributes" => "allowElements"
- chrismorgan 6y ago<blink> would be allowElements, not allowAttributes.