corner case - fixes #1363

This commit is contained in:
niphlod
2016-06-28 23:52:28 +02:00
parent 5f80300c5d
commit 9c8db3f65a
+1 -1
View File
@@ -129,7 +129,7 @@ class XssCleaner(HTMLParser):
def handle_endtag(self, tag):
bracketed = '</%s>' % tag
self.in_disallowed.pop()
self.in_disallowed and self.in_disallowed.pop()
if tag not in self.permitted_tags:
if (not self.strip_disallowed):
self.result += xssescape(bracketed)