Merge pull request #1381 from niphlod/fix/1363

corner case - fixes #1363
This commit is contained in:
mdipierro
2016-07-01 02:00:18 -05:00
committed by GitHub
+1 -1
View File
@@ -129,7 +129,7 @@ class XssCleaner(HTMLParser):
def handle_endtag(self, tag):
bracketed = '</%s>' % tag
self.in_disallowed.pop()
self.in_disallowed and self.in_disallowed.pop()
if tag not in self.permitted_tags:
if (not self.strip_disallowed):
self.result += xssescape(bracketed)