Replies: 1 comment
-
This is not something that poses a problem as part of the text, as opposed to attributes or script tag body, in HTML. So it is not a supported use case. You might be able to manipulate it with the |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Is there a way to use the sanitizer in order remove/escape "javascript:" from a string not inside tags?
Couldn't find anything in the documentation..
for example:
dirty = "javascript:alert(1);//"
Beta Was this translation helpful? Give feedback.
All reactions