leizongmin / js-xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
http://jsxss.com
Other
5.2k stars 629 forks source link

image src = base64 miss #184

Closed Leonard-Li777 closed 4 years ago

Leonard-Li777 commented 4 years ago

as title

sijanec commented 4 years ago

It looks like the poster of this issue doesn't care about it being fixed, as seen from his behaviour, not showing any interest at all.

I understood his question and have the same problem. Image tags get base64 encoded data stripped out. Why would base64 encoded image be an issue? If not, please allow it.

Thanks in advance!

Edit: this is a duplicate, see #174

leizongmin commented 4 years ago

Sorry, so late to deal with this problem. I have released a new version v1.0.7 and added image data-url to the default configuration.