{"action":"created","issue":{"url":"https://api.github.com/repos/mganss/HtmlSanitizer/issues/63","repository_url":"https://api.github.com/repos/mganss/HtmlSanitizer","labels_url":"https://api.github.com/repos/mganss/HtmlSanitizer/issues/63/labels{/name}","comments_url":"https://api.github.com/repos/mganss/HtmlSanitizer/issues/63/comments","events_url":"https://api.github.com/repos/mganss/HtmlSanitizer/issues/63/events","html_url":"https://github.com/mganss/HtmlSanitizer/issues/63","id":138281919,"number":63,"title":"Can't sanitize full documents","user":{"login":"tl24","id":3987166,"avatar_url":"https://avatars.githubusercontent.com/u/3987166?v=3","gravatar_id":"","url":"https://api.github.com/users/tl24","html_url":"https://github.com/tl24","followers_url":"https://api.github.com/users/tl24/followers","following_url":"https://api.github.com/users/tl24/following{/other_user}","gists_url":"https://api.github.com/users/tl24/gists{/gist_id}","starred_url":"https://api.github.com/users/tl24/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tl24/subscriptions","organizations_url":"https://api.github.com/users/tl24/orgs","repos_url":"https://api.github.com/users/tl24/repos","events_url":"https://api.github.com/users/tl24/events{/privacy}","received_events_url":"https://api.github.com/users/tl24/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mganss/HtmlSanitizer/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2016-03-03T19:59:41Z","updated_at":"2016-03-08T15:14:29Z","closed_at":null,"body":"We're trying to sanitize full html documents and we're losing the outer parts of the document.  From the looks of the code it is automatically wrapping the html text in a body tag before passing it through.  Is there any way around this?\r\n\r\nWe're loading html emails into a browser window which is why they are full documents.  We put them into an iframe so they don't mess with the surrounding page.  The iframe is sandboxed, but it would be nice to have the peace of mind of knowing we tried to sanitize the html as well.\r\n\r\n "},"comment":{"url":"https://api.github.com/repos/mganss/HtmlSanitizer/issues/comments/193819070","html_url":"https://github.com/mganss/HtmlSanitizer/issues/63#issuecomment-193819070","issue_url":"https://api.github.com/repos/mganss/HtmlSanitizer/issues/63","id":193819070,"user":{"login":"mganss","id":976344,"avatar_url":"https://avatars.githubusercontent.com/u/976344?v=3","gravatar_id":"","url":"https://api.github.com/users/mganss","html_url":"https://github.com/mganss","followers_url":"https://api.github.com/users/mganss/followers","following_url":"https://api.github.com/users/mganss/following{/other_user}","gists_url":"https://api.github.com/users/mganss/gists{/gist_id}","starred_url":"https://api.github.com/users/mganss/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mganss/subscriptions","organizations_url":"https://api.github.com/users/mganss/orgs","repos_url":"https://api.github.com/users/mganss/repos","events_url":"https://api.github.com/users/mganss/events{/privacy}","received_events_url":"https://api.github.com/users/mganss/received_events","type":"User","site_admin":false},"created_at":"2016-03-08T15:14:29Z","updated_at":"2016-03-08T15:14:29Z","body":"> JavaScript execution via `<TITLE>` tag on Inernet Explorer 9\r\n\r\nYeah, but it's only due to the `onpropertychange` attribute not the title tag per se. Anyway, I'll leave it as is for now (not allowing `<title>` nor any other additional tags besides html, head, and body).\r\n\r\n@tl24 Does the beta work for your use case?"}}