Index: ui/webui/resources/js/parse_html_subset.js |
diff --git a/ui/webui/resources/js/parse_html_subset.js b/ui/webui/resources/js/parse_html_subset.js |
index 3fa9bfe948d422d4b479881642bf773c08f17321..bd53e8e70572e3010b47ea8a9f74b7261f7712fb 100644 |
--- a/ui/webui/resources/js/parse_html_subset.js |
+++ b/ui/webui/resources/js/parse_html_subset.js |
@@ -18,8 +18,8 @@ var parseHtmlSubset = (function() { |
var allowedAttributes = { |
'href': function(node, value) { |
// Only allow a[href] starting with chrome:// and https:// |
- return node.tagName == 'A' && (value.startsWith('chrome://') || |
- value.startsWith('https://')); |
+ return node.tagName == 'A' && |
+ (value.startsWith('chrome://') || value.startsWith('https://')); |
}, |
'target': function(node, value) { |
// Only allow a[target='_blank']. |