Add remove <link> in XSS

8 years ago · 9f8e80f3f4
1 changed files with 1 additions and 0 deletions
--- a/utility.js
+++ b/utility.js
@ -77,6 +77,7 @@ module.exports = {
      let $ = cheerio.load(s);
      $('script').remove();
      $('style').remove();
+      $('link').remove();
      $('*').each((i, elem) => {
        let a = Object.getOwnPropertyNames(elem.attribs);
        for (let key of a) {