Loading k9mail/src/main/java/com/fsck/k9/message/html/HtmlSanitizer.java +1 −1 Original line number Diff line number Diff line Loading @@ -13,7 +13,7 @@ public class HtmlSanitizer { HtmlSanitizer() { Whitelist whitelist = Whitelist.relaxed() .addTags("font", "hr") .addTags("font", "hr", "ins", "del") .addAttributes("table", "align", "bgcolor", "border", "cellpadding", "cellspacing", "width") .addAttributes(":all", "class", "style", "id") .addProtocols("img", "src", "http", "https", "cid", "data"); Loading k9mail/src/test/java/com/fsck/k9/message/html/HtmlSanitizerTest.java +9 −0 Original line number Diff line number Diff line Loading @@ -167,4 +167,13 @@ public class HtmlSanitizerTest { assertEquals("<html><head></head><body>one<hr>two<hr>three</body></html>", toCompactString(result)); } @Test public void shouldKeepInsDelTags() { String html = "<html><head></head><body><ins>Inserted</ins><del>Deleted</del></body></html>"; Document result = htmlSanitizer.sanitize(html); assertEquals(html, toCompactString(result)); } } Loading
k9mail/src/main/java/com/fsck/k9/message/html/HtmlSanitizer.java +1 −1 Original line number Diff line number Diff line Loading @@ -13,7 +13,7 @@ public class HtmlSanitizer { HtmlSanitizer() { Whitelist whitelist = Whitelist.relaxed() .addTags("font", "hr") .addTags("font", "hr", "ins", "del") .addAttributes("table", "align", "bgcolor", "border", "cellpadding", "cellspacing", "width") .addAttributes(":all", "class", "style", "id") .addProtocols("img", "src", "http", "https", "cid", "data"); Loading
k9mail/src/test/java/com/fsck/k9/message/html/HtmlSanitizerTest.java +9 −0 Original line number Diff line number Diff line Loading @@ -167,4 +167,13 @@ public class HtmlSanitizerTest { assertEquals("<html><head></head><body>one<hr>two<hr>three</body></html>", toCompactString(result)); } @Test public void shouldKeepInsDelTags() { String html = "<html><head></head><body><ins>Inserted</ins><del>Deleted</del></body></html>"; Document result = htmlSanitizer.sanitize(html); assertEquals(html, toCompactString(result)); } }