Removing preload and prefetch links that inject scripts

shivanshu3 / strip-js

[DEPRECATED] NPM Module which strips out all JavaScript code from some HTML text

MIT License

7 stars 7 forks source link

Closed tommedema closed 6 years ago

tommedema commented 6 years ago

Currently script injecting is still possible using preload:

<link rel="preload" href="https://adservice.google.com.sg/adsid/integrator.js?domain=sourceforge.net" as="script">

This PR fixes this with a test.

shivanshu3 commented 6 years ago

Thank you @tommedema for this PR!

shivanshu3 commented 6 years ago

FYI: I've published your changes as v1.1.0 on npm @tommedema