Verified Commit 2d7bd40c authored by Dave Long's avatar Dave Long
Browse files

fix: SA-CORE-2026-015 

By: dev-winty
By: benjifisher
By: catch
By: dcam
By: fathershawn
By: larowlan
By: mcdruid
By: mohit_aghera
By: xjm
By: akalata
By: drumm
By: greggles
By: longwave
By: neclimdul
By: poker10
By: ram4nd
(cherry picked from commit e5bda07d)
parent 0106f0d3

core/modules/link/src/AttributeXss.php

+2 −0
Changes for core/modules/link/src/AttributeXss.php: 2 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -41,6 +41,8 @@ private static function attributes(string $attributes): array { 
            $skip = (

              $attribute_name == 'style' ||

              str_starts_with($attribute_name, 'on') ||

              str_starts_with($attribute_name, 'data-hx') ||

              str_starts_with($attribute_name, 'hx') ||

              str_starts_with($attribute_name, '-') ||

              // Ignore long attributes to avoid unnecessary processing

              // overhead.