public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-15 16:55:57 +00:00
Code Issues Releases Wiki Activity

sanitize: disable referrer via referrerpolicy for img elements

Browse Source
This commit is contained in:
Andrew Dolgov
2017-12-13 20:07:10 +03:00
parent 6184f5264e
commit 7651b6e2cd
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
include/functions.php
View File

@@ -1585,6 +1585,7 @@
} }
if ($entry->nodeName == 'img') { if ($entry->nodeName == 'img') {
$entry->setAttribute('referrerpolicy', 'no-referrer');
if ($entry->hasAttribute('src')) { if ($entry->hasAttribute('src')) {
$is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https'; $is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';