sanitize: disallow width and height attributes for images

7 years ago · 8babb8e75a
parent 2eaf2a1f36
commit 8babb8e75a
1 changed files with 3 additions and 0 deletions
--- a/include/functions.php
+++ b/include/functions.php
@ -1587,6 +1587,9 @@
 			if ($entry->nodeName == 'img') {
 				$entry->setAttribute('referrerpolicy', 'no-referrer');

+				$entry->removeAttribute('width');
+				$entry->removeAttribute('height');
+
 				if ($entry->hasAttribute('src')) {
 					$is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';