treehouse
/
mastodon
22
8
Fork 5
Code Issues 32 Pull Requests Projects 1 Releases Wiki Activity

Change HTML sanitization to remove unusable and unused `embed` tag (#34021)

stable-4.3^2^2
Claire 2025-02-27 11:12:58 +01:00
parent 57e4232b3e
commit 19b3469c29
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/sanitize_ext/sanitize_config.rb
View File

@ -92,18 +92,16 @@ class Sanitize
) )
MASTODON_OEMBED = freeze_config( MASTODON_OEMBED = freeze_config(
elements: %w(audio embed iframe source video), elements: %w(audio iframe source video),
attributes: { attributes: {
'audio' => %w(controls), 'audio' => %w(controls),
'embed' => %w(height src type width),
'iframe' => %w(allowfullscreen frameborder height scrolling src width), 'iframe' => %w(allowfullscreen frameborder height scrolling src width),
'source' => %w(src type), 'source' => %w(src type),
'video' => %w(controls height loop width), 'video' => %w(controls height loop width),
}, },
protocols: { protocols: {
'embed' => { 'src' => HTTP_PROTOCOLS },
'iframe' => { 'src' => HTTP_PROTOCOLS }, 'iframe' => { 'src' => HTTP_PROTOCOLS },
'source' => { 'src' => HTTP_PROTOCOLS }, 'source' => { 'src' => HTTP_PROTOCOLS },
}, },