Security update for Core, with self-updated composer

[yaffs-website] / vendor / masterminds / html5 / src / HTML5 / Parser / DOMTreeBuilder.php

diff --git a/vendor/masterminds/html5/src/HTML5/Parser/DOMTreeBuilder.php b/vendor/masterminds/html5/src/HTML5/Parser/DOMTreeBuilder.php
index ccad22944b58458d961c2a5cb518ce1a30dab11a..b26860da9c1bb1f3e1c851c6e2a5db95377f389b 100644 (file)
--- a/vendor/masterminds/html5/src/HTML5/Parser/DOMTreeBuilder.php
+++ b/vendor/masterminds/html5/src/HTML5/Parser/DOMTreeBuilder.php
@@ -274,7 +274,8 @@ class DOMTreeBuilder implements EventHandler
 
         // SPECIAL TAG HANDLING:
         // Spec says do this, and "don't ask."
-        if ($name == 'image') {
+        // find the spec where this is defined... looks problematic
+        if ($name == 'image' && !($this->insertMode === static::IM_IN_SVG || $this->insertMode === static::IM_IN_MATHML)) {
             $name = 'img';
         }
 
@@ -681,4 +682,4 @@ class DOMTreeBuilder implements EventHandler
     {
         return $this->current->tagName == $tagname;
     }
-}
\ No newline at end of file
+}