Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

是否能增加白名单 tag 功能? #36

Open
kasuganosoras opened this issue Oct 25, 2018 · 0 comments
Open

是否能增加白名单 tag 功能? #36

kasuganosoras opened this issue Oct 25, 2018 · 0 comments

Comments

@kasuganosoras
Copy link

kasuganosoras commented Oct 25, 2018

开启了 html 标签白名单以后,如果用户插入一段这样的代码

<i onclick="alert(233)">XSS</i>

还是可以成功触发 onclick 事件
是否能加入一个白名单的功能,比如指定了只能加入 style、class 这些 tag
谢谢。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant