Closed jigarius closed 1 year ago
I haven't done much research, but I'm just sharing the quick solution that worked for me.
sanitization:
- title: Ignore itok query parameter from image style URIs
pattern: \?itok=[^"]+
substitute: ?itok=__rand__
selector: source,img
I've updated the Drupal preset to handle this and other newer Drupal hashes.
The problem
Drupal adds tokens like
?itok=X
to image styles. For example:This results in many false positives.