From 4669d3d4624d18b68adcc137a7555883fd9759ab Mon Sep 17 00:00:00 2001 From: Wilmer Arambula Date: Sat, 2 Mar 2024 18:35:34 -0300 Subject: [PATCH] Add 'formaction' to list of evil attributes to remove in `Sanitize::class` helper. --- CHANGELOG.md | 2 ++ src/Sanitize.php | 1 + 2 files changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 631f125..117692a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## 0.2.2 Under development +- Bug #9: Add 'formaction' to list of evil attributes to remove in `Sanitize::class` helper (@terabytesoftw) + ## 0.2.1 March 2, 2024 - Bug #7: Update branch alias in `composer.json` (@terabytesoftw) diff --git a/src/Sanitize.php b/src/Sanitize.php index 70c16f3..700b737 100644 --- a/src/Sanitize.php +++ b/src/Sanitize.php @@ -17,6 +17,7 @@ final class Sanitize */ private static array $removeEvilAttributes = [ 'form', + 'formaction', 'style', ]; /**