Strip script and style tags from feed output

This commit is contained in:
Ruben 2026-05-10 20:54:56 +02:00
parent 449e6f8e03
commit 0866fe93ba

View file

@ -104,6 +104,12 @@ if (str_ends_with($ctx->requestPath, 'feed.xml')) {
foreach ($contentFiles as $file) { foreach ($contentFiles as $file) {
$item['content'] .= renderContentFile($file, $ctx); $item['content'] .= renderContentFile($file, $ctx);
} }
// Strip <script> and <style> blocks — not useful in feed readers
$stripped = preg_replace('#<script[^>]*>.*?</script>#is', '', $item['content']);
if ($stripped !== null) {
$stripped = preg_replace('#<style[^>]*>.*?</style>#is', '', $stripped);
}
$item['content'] = $stripped ?? $item['content'];
} }
unset($item); unset($item);