sanitize: disallow width and height attributes for images

1 files changed, 3 insertions, 0 deletions

diff --git a/include/functions.php b/include/functions.php
index ebf4021ae..efa4ec8e7 100755
--- a/include/functions.php
+++ b/include/functions.php
@@ -1587,6 +1587,9 @@
 			if ($entry->nodeName == 'img') {
 				$entry->setAttribute('referrerpolicy', 'no-referrer');
 
+				$entry->removeAttribute('width');
+				$entry->removeAttribute('height');
+
 				if ($entry->hasAttribute('src')) {
 					$is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';