Security fix

diegocr · diegocr · commit 626567755ca1 · 2014-03-27T07:19:49.000+01:00
diff --git a/jspdf.plugin.from_html.js b/jspdf.plugin.from_html.js
@@ -309,7 +309,7 @@
         $hiddendiv = $("<div style=\"" + visuallyhidden + "\">" + "<iframe style=\"height:1px;width:1px\" name=\"" + framename + "\" />" + "</div>").appendTo(document.body);
         $frame = window.frames[framename];
         return $($frame.document.body).html(element)[0];
-      })(element);
+      })(element.replace(/<\/?script[^>]*?>/gi,''));
     }
     var r = new Renderer(pdf, x, y, settings);
     loadImgs.call(this, element, r, settings.elementHandlers, callback);

Original file line number	Diff line number	Diff line change
`@@ -309,7 +309,7 @@`
`309`	`309`	`$hiddendiv = $("<div style=\"" + visuallyhidden + "\">" + "<iframe style=\"height:1px;width:1px\" name=\"" + framename + "\" />" + "</div>").appendTo(document.body);`
`310`	`310`	`$frame = window.frames[framename];`
`311`	`311`	`return $($frame.document.body).html(element)[0];`
`312`		`- })(element);`
	`312`	`+ })(element.replace(/<\/?script[^>]*?>/gi,''));`
`313`	`313`	`}`
`314`	`314`	`var r = new Renderer(pdf, x, y, settings);`
`315`	`315`	`loadImgs.call(this, element, r, settings.elementHandlers, callback);`