Replies: 1 comment
-
|
This is not something that poses a problem as part of the text, as opposed to attributes or script tag body, in HTML. So it is not a supported use case. You might be able to manipulate it with the |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Is there a way to use the sanitizer in order remove/escape "javascript:" from a string not inside tags?
Couldn't find anything in the documentation..
for example:
dirty = "javascript:alert(1);//"Beta Was this translation helpful? Give feedback.
All reactions