| Index: ui/webui/resources/js/parse_html_subset.js
|
| diff --git a/ui/webui/resources/js/parse_html_subset.js b/ui/webui/resources/js/parse_html_subset.js
|
| index 3fa9bfe948d422d4b479881642bf773c08f17321..bd53e8e70572e3010b47ea8a9f74b7261f7712fb 100644
|
| --- a/ui/webui/resources/js/parse_html_subset.js
|
| +++ b/ui/webui/resources/js/parse_html_subset.js
|
| @@ -18,8 +18,8 @@ var parseHtmlSubset = (function() {
|
| var allowedAttributes = {
|
| 'href': function(node, value) {
|
| // Only allow a[href] starting with chrome:// and https://
|
| - return node.tagName == 'A' && (value.startsWith('chrome://') ||
|
| - value.startsWith('https://'));
|
| + return node.tagName == 'A' &&
|
| + (value.startsWith('chrome://') || value.startsWith('https://'));
|
| },
|
| 'target': function(node, value) {
|
| // Only allow a[target='_blank'].
|
|
|