mixing tags with urls breaks sanitizeHTML #1922

New Issue

Open

opened 2013-10-24 13:45:03 +00:00 by j · 0 comments

j commented

2013-10-24 13:45:03 +00:00

Owner

pasting something like:

<iframe width="425" height="350" src="https://maps.google.com/maps/ms?ie=UTF8&hl=en&msa=0&t=h&msid=205341649788129021815.0004919f43593ce205203&ll=19.053721,72.930336&spn=0.00716,0.009935&output=embed"></iframe>

will be escaped strangely. somehow turning the url into a link adds a closing and only than escapes it.

pasting something like: ``` <iframe width="425" height="350" src="https://maps.google.com/maps/ms?ie=UTF8&hl=en&msa=0&t=h&msid=205341649788129021815.0004919f43593ce205203&ll=19.053721,72.930336&spn=0.00716,0.009935&output=embed"></iframe> ``` will be escaped strangely. somehow turning the url into a link adds a closing </iframe> and only than escapes it.