fix: #784 iframe js prevent

JiHong88 · Jun 26, 2021 · 6d4414b · 6d4414b
1 parent 04fc6e5
commit 6d4414b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/lib/core.js b/src/lib/core.js
@@ -4740,7 +4740,7 @@ export default function (context, pluginCallButtons, plugins, lang, options, _re
             if (v) {
                 for (let i = 0, len = v.length; i < len; i++) {
                     if (lowLevelCheck && /^class="(?!(__se__|se-|katex))/.test(v[i])) continue;
-                    t += ' ' + (/^href\s*=\s*('|"|\s)*javascript\s*\:/i.test(v[i]) ? '' : v[i]);
+                    t += ' ' + (/^(?:href|src)\s*=\s*('|"|\s)*javascript\s*\:/i.test(v[i]) ? '' : v[i]);
                 }
             }