ampproject / ampproject/amphtml
AMP for Email: sanitize non-HTTPS image URLs in Mustache template
Open
Stale
Type: Feature Request
- Dominant language
- JavaScript
- Stars
- 14.9k
- Forks
- 4.1k
- PR merge metrics
- No merged PRs in 30d
Description
The spec doesn't allow non-HTTPS image URLs, but currently we don't have any code in the AMP runtime sanitizer that enforces this. Email clients sanitize this on the server-side anyway, but it'd be nice to align the AMP runtime behavior with email clients for DevX (e.g., playground behavior consistent with production).
/to @nainar
Contributor guide
Assessment
This issue has not been assessed yet.