servers
/
ttrss
mirror of https://tt-rss.org/git/tt-rss.git
1
0
Fork 0
Code Issues Releases Wiki Activity

sanitize: disable referrer via referrerpolicy for img elements

This commit is contained in:
Andrew Dolgov 2017-12-13 20:07:10 +03:00
parent 6184f5264e
commit 7651b6e2cd
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
include/functions.php
View File

@ -1585,6 +1585,7 @@
}
if ($entry->nodeName == 'img') {
$entry->setAttribute('referrerpolicy', 'no-referrer');
if ($entry->hasAttribute('src')) {
$is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';