We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents a105af7 + 2bfd407 commit 90ed5c4Copy full SHA for 90ed5c4
lib/rails/html/scrubbers.rb
@@ -140,9 +140,7 @@ def scrub_attribute(node, attr_node)
140
attr_node.node_name
141
end
142
143
- if Loofah::HTML5::SafeList::ATTR_VAL_IS_URI.include?(attr_name)
144
- return if Loofah::HTML5::Scrub.scrub_uri_attribute(attr_node)
145
- end
+ return if Loofah::HTML5::SafeList::ATTR_VAL_IS_URI.include?(attr_name) && Loofah::HTML5::Scrub.scrub_uri_attribute(attr_node)
146
147
if Loofah::HTML5::SafeList::SVG_ATTR_VAL_ALLOWS_REF.include?(attr_name)
148
Loofah::HTML5::Scrub.scrub_attribute_that_allows_local_ref(attr_node)
0 commit comments