Fix potential xss on get width/height #1184

AmauriC · Feb 27, 2024 · 1249057 · 1249057
1 parent 941c8c5
commit 1249057
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/tarteaucitron.js b/tarteaucitron.js
@@ -2248,10 +2248,10 @@ var tarteaucitron = {
         return source;
     },
     "getElemWidth": function(elem) {
-        return elem.getAttribute('width') || elem.clientWidth;
+        return tarteaucitron.getElemAttr(elem, 'width') || elem.clientWidth;
     },
     "getElemHeight": function(elem) {
-        return elem.getAttribute('height') || elem.clientHeight;
+        return tarteaucitron.getElemAttr(elem, 'height') || elem.clientHeight;
     },
     "getElemAttr": function (elem, attr) {
         var attribute = elem.getAttribute('data-' + attr) || elem.getAttribute(attr);

diff --git a/tarteaucitron.min.js b/tarteaucitron.min.js