Merge pull request #16 from horde/feat/port-pr-15-HTML-CVE-2025-30349-toCVE-2025-30349

feat/port pr 15 HTML CVE 2025 30349 toCVE 2025 30349

Author: TDannhauer

lib/Mime/Viewer/Html.php

@@ -352,6 +352,16 @@ protected function _node($doc, $node)
             $node->setAttribute('style', $style . 'width:auto !important');
             break;
 
+        case 'source':
+            if ($this->_imgBlock() &&
+                $node->hasAttribute('srcset'))
+            {
+                $node->setAttribute(self::SRCSETBLOCK, $node->getAttribute('srcset'));
+                $node->setAttribute('srcset', '');
+                $this->_imptmp['imgblock'] = true;
+                break;
+            }
+
         case 'img':
         case 'input':
             if ($node->hasAttribute('src')) {
@@ -454,6 +464,9 @@ protected function _node($doc, $node)
                 $node->parentNode->removeChild($node);
                 break;
             }
+            if ($node->parentNode) {
+                $node->parentNode->removeChild($node);
+            }
             break;
 
         case 'table':