[HtmlSanitizer] Consider width attribute as safe

symfony · Oct 27, 2023 · 45e5a24 · 45e5a24
1 parent 947492c
commit 45e5a24
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/Reference/W3CReference.php b/Reference/W3CReference.php
@@ -394,7 +394,7 @@ final class W3CReference
         'vlink' => false,
         'vspace' => true,
         'webkitdirectory' => true,
-        'width' => false,
+        'width' => true,
         'wrap' => true,
     ];
 }
diff --git a/Tests/HtmlSanitizerAllTest.php b/Tests/HtmlSanitizerAllTest.php
@@ -427,8 +427,8 @@ public static function provideSanitizeBody()
                 '<hr />',
             ],
             [
-                '<img src="/img/example.jpg" alt="Image alternative text" title="Image title">',
-                '<img src="/img/example.jpg" alt="Image alternative text" title="Image title" />',
+                '<img src="/img/example.jpg" alt="Image alternative text" title="Image title" height="150" width="300">',
+                '<img src="/img/example.jpg" alt="Image alternative text" title="Image title" height="150" width="300" />',
             ],
             [
                 '<img src="http://trusted.com/img/example.jpg" alt="Image alternative text" title="Image title" />',