fix(xss): adapt safelist override to updated jsoup

This commit is contained in:
PIGCLOUD committed 2026-11-03 14:51:50 +08:00
1 parent ccdbde5229
commit cbdd0e202c
1 file changed
+1 -1
@@ -100,7 +100,7 @@ public class XssUtil {
}
@Override
protected boolean isSafeAttribute(String tagName, Element el, Attribute attr) {
public boolean isSafeAttribute(String tagName, Element el, Attribute attr) {
// 不允许 javascript 开头的 src 和 href
if ("src".equalsIgnoreCase(attr.getKey()) || "href".equalsIgnoreCase(attr.getKey())) {
String value = attr.getValue();