fix(mail): remove media event handlers from HTML messages

Fixes #5369
Alinto · Aug 2, 2021 · 69972f7 · 69972f7
1 parent 8947f29
commit 69972f7
Showing 1 changed file with 24 additions and 1 deletion.
diff --git a/UI/MailPartViewers/UIxMailPartHTMLViewer.m b/UI/MailPartViewers/UIxMailPartHTMLViewer.m
@@ -562,7 +562,30 @@ - (void) startElement: (NSString *) _localName
 		       [name isEqualToString: @"onfocus"] ||
 		       [name isEqualToString: @"onreset"] ||
 		       [name isEqualToString: @"onselect"] ||
-		       [name isEqualToString: @"onsubmit"]) 
+		       [name isEqualToString: @"onsubmit"] ||
+
+                       // Media Events
+                       [name isEqualToString: @"oncanplay"] ||
+                       [name isEqualToString: @"oncanplaythrough"] ||
+                       [name isEqualToString: @"oncuechange"] ||
+                       [name isEqualToString: @"ondurationchange"] ||
+                       [name isEqualToString: @"onemptied"] ||
+                       [name isEqualToString: @"onended"] ||
+                       [name isEqualToString: @"onloadeddata"] ||
+                       [name isEqualToString: @"onloadedmetadata"] ||
+                       [name isEqualToString: @"onloadstart"] ||
+                       [name isEqualToString: @"onpause"] ||
+                       [name isEqualToString: @"onplay"] ||
+                       [name isEqualToString: @"onplaying"] ||
+                       [name isEqualToString: @"onprogress"] ||
+                       [name isEqualToString: @"onratechange"] ||
+                       [name isEqualToString: @"onseeked"] ||
+                       [name isEqualToString: @"onseeking"] ||
+                       [name isEqualToString: @"onstalled"] ||
+                       [name isEqualToString: @"onsuspend"] ||
+                       [name isEqualToString: @"ontimeupdate"] ||
+                       [name isEqualToString: @"onvolumechange"] ||
+                       [name isEqualToString: @"onwaiting"])
 		{
 		  skipAttribute = YES;
 		}