Skip to content
This repository was archived by the owner on Apr 12, 2024. It is now read-only.

Commit 2c22c57

Browse files
IgorMinarpetebacondarwin
authored andcommitted
refactor($sanitize): remove <script> from valid block elements
the script and style tag are explicitly blacklisted, so this doesn't change any functionality. the change is done to improve code clarity. Closes #12524
1 parent a4dfa4d commit 2c22c57

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/ngSanitize/sanitize.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -229,7 +229,7 @@ var optionalEndTagBlockElements = toMap("colgroup,dd,dt,li,p,tbody,td,tfoot,th,t
229229
// Safe Block Elements - HTML5
230230
var blockElements = angular.extend({}, optionalEndTagBlockElements, toMap("address,article," +
231231
"aside,blockquote,caption,center,del,dir,div,dl,figure,figcaption,footer,h1,h2,h3,h4,h5," +
232-
"h6,header,hgroup,hr,ins,map,menu,nav,ol,pre,script,section,table,ul"));
232+
"h6,header,hgroup,hr,ins,map,menu,nav,ol,pre,section,table,ul"));
233233

234234
// Inline Elements - HTML5
235235
var inlineElements = angular.extend({}, optionalEndTagInlineElements, toMap("a,abbr,acronym,b," +

0 commit comments

Comments
 (0)