mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-03-01 03:09:42 +03:00
- Removes 'on*' attributes from elements. - Also updated script logic to remove scripts instead of escaping. - All JS injection removal now uses DomDocument + xpath parsing.
5.1 KiB
5.1 KiB