File 0001_CVE-2018-3741-xss_vulnerability.patch of Package rubygem-rails-html-sanitizer.30440

--- rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb.old	2019-08-02 11:21:18.413347885 +0200
+++ rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb	2019-08-02 11:21:48.785346493 +0200
@@ -152,6 +152,8 @@
         end
 
         node.remove_attribute(attr_node.name) if attr_name == 'src' && attr_node.value !~ /[^[:space:]]/
+
+        Loofah::HTML5::Scrub.force_correct_attribute_escaping! node
       end
     end
 
openSUSE Build Service is sponsored by