From be3979241f6695fc68b24710f71184bc1a791382 Mon Sep 17 00:00:00 2001
From: Ralph Slooten <axllent@gmail.com>
Date: Sun, 16 Jul 2023 00:16:45 +1200
Subject: [PATCH] UI: Remove `<base />` tag if set in HTML preview

---
 server/ui-src/templates/Message.vue | 7 ++++++-
 storage/database.go                 | 6 +-----
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/server/ui-src/templates/Message.vue b/server/ui-src/templates/Message.vue
index 467b637..c523495 100644
--- a/server/ui-src/templates/Message.vue
+++ b/server/ui-src/templates/Message.vue
@@ -190,6 +190,11 @@ export default {
 			this.resizeIframe(el)
 		},
 
+		sanitizeHTML: function (h) {
+			// remove <base/> tag if set
+			return h.replace(/<base .*>/mi, '')
+		},
+
 		saveTags: function () {
 			let self = this
 
@@ -370,7 +375,7 @@ export default {
 			<div v-if="message.HTML != ''" class="tab-pane fade show" id="nav-html" role="tabpanel"
 				aria-labelledby="nav-html-tab" tabindex="0">
 				<div id="responsive-view" :class="scaleHTMLPreview" :style="responsiveSizes[scaleHTMLPreview]">
-					<iframe target-blank="" class="tab-pane d-block" id="preview-html" :srcdoc="message.HTML"
+					<iframe target-blank="" class="tab-pane d-block" id="preview-html" :srcdoc="sanitizeHTML(message.HTML)"
 						v-on:load="resizeIframe" frameborder="0" style="width: 100%; height: 100%;">
 					</iframe>
 				</div>
diff --git a/storage/database.go b/storage/database.go
index 5fd6e20..d366fab 100644
--- a/storage/database.go
+++ b/storage/database.go
@@ -13,7 +13,6 @@ import (
 	"os/signal"
 	"path"
 	"path/filepath"
-	"regexp"
 	"sort"
 	"strings"
 	"syscall"
@@ -540,10 +539,7 @@ func GetMessage(id string) (*Message, error) {
 		Text:       env.Text,
 	}
 
-	// strip base tags
-	var re = regexp.MustCompile(`(?U)<base .*>`)
-	html := re.ReplaceAllString(env.HTML, "")
-	obj.HTML = html
+	obj.HTML = env.HTML
 	obj.Inline = []Attachment{}
 	obj.Attachments = []Attachment{}