Use lower case link rel attribute words

OWASP · Feb 2, 2024 · a6dd52a · a6dd52a
1 parent b73bd9d
commit a6dd52a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/org/owasp/html/HtmlPolicyBuilder.java b/src/main/java/org/owasp/html/HtmlPolicyBuilder.java
@@ -1049,7 +1049,7 @@ public String apply(String elementName, List<String> attrs) {
                     final String lowerCaseRel = Strings.toLowerCase(rel);
                     if ((skip.isEmpty() || !skip.contains(lowerCaseRel)) && !present.contains(lowerCaseRel)) {
                       present.add(lowerCaseRel);
-                      sb.append(rel).append(' ');
+                      sb.append(lowerCaseRel).append(' ');
                     }
                   }
                   left = i + 1;