html5lib
diff --git a/‎CHANGES.rst
Copy file name to clipboardExpand all lines: CHANGES.rst
+9Lines changed: 9 additions & 0 deletions b/‎CHANGES.rst
Copy file name to clipboardExpand all lines: CHANGES.rst
+9Lines changed: 9 additions & 0 deletions
diff --git a/‎html5lib/sanitizer.py
Copy file name to clipboardExpand all lines: html5lib/sanitizer.py
+1-1Lines changed: 1 addition & 1 deletion b/‎html5lib/sanitizer.py
Copy file name to clipboardExpand all lines: html5lib/sanitizer.py
+1-1Lines changed: 1 addition & 1 deletion
diff --git a/‎html5lib/tests/test_sanitizer.py
Copy file name to clipboardExpand all lines: html5lib/tests/test_sanitizer.py
+10Lines changed: 10 additions & 0 deletions b/‎html5lib/tests/test_sanitizer.py
Copy file name to clipboardExpand all lines: html5lib/tests/test_sanitizer.py
+10Lines changed: 10 additions & 0 deletions
@@ -1,6 +1,15 @@
 Change Log
 ----------
 
+0.9999.1/1.0b5.1
+~~~~~~~~~~~~~~~~
+
+Released on April 30, 2015
+
+* Fix #188: fix the sanitizer to not throw an exception when sanitizing
+  bogus data URLs.
+
+
 0.9999/1.0b5
 ~~~~~~~~~~~~
 
 
@@ -215,7 +215,7 @@ def allowed_token(self, token, token_type):
                         m = content_type_rgx.match(uri.path)
                         if not m:
                             del attrs[attr]
-                        if m.group('content_type') not in self.allowed_content_types:
+                        elif m.group('content_type') not in self.allowed_content_types:
                             del attrs[attr]
 
             for attr in self.svg_attr_val_allows_ref:
 
@@ -104,6 +104,16 @@ def test_sanitizer():
                """<img src="%s:%s">foo</a>""" % (protocol, rest_of_uri),
                toxml)
 
+    yield (runSanitizerTest, "test_invalid_data_uri",
+           "<audio controls=\"\"></audio>",
+           "<audio controls=\"\" src=\"data:foobar\"></audio>",
+           toxml)
+
+    yield (runSanitizerTest, "test_data_uri_disallowed_type",
+           "<audio controls=\"\"></audio>",
+           "<audio controls=\"\" src=\"data:text/html,<html>\"></audio>",
+           toxml)
+
     for protocol in sanitizer.HTMLSanitizer.allowed_protocols:
         rest_of_uri = '//sub.domain.tld/path/object.ext'
         if protocol == 'data':