Change HTML sanitization to remove unusable and unused embed tag (#34021)
				
					
				
			This commit is contained in:
		
							parent
							
								
									cde3167d09
								
							
						
					
					
						commit
						f5c4022a20
					
				@ -131,18 +131,16 @@ class Sanitize
 | 
			
		||||
    )
 | 
			
		||||
 | 
			
		||||
    MASTODON_OEMBED = freeze_config(
 | 
			
		||||
      elements: %w(audio embed iframe source video),
 | 
			
		||||
      elements: %w(audio iframe source video),
 | 
			
		||||
 | 
			
		||||
      attributes: {
 | 
			
		||||
        'audio' => %w(controls),
 | 
			
		||||
        'embed' => %w(height src type width),
 | 
			
		||||
        'iframe' => %w(allowfullscreen frameborder height scrolling src width),
 | 
			
		||||
        'source' => %w(src type),
 | 
			
		||||
        'video' => %w(controls height loop width),
 | 
			
		||||
      },
 | 
			
		||||
 | 
			
		||||
      protocols: {
 | 
			
		||||
        'embed' => { 'src' => HTTP_PROTOCOLS },
 | 
			
		||||
        'iframe' => { 'src' => HTTP_PROTOCOLS },
 | 
			
		||||
        'source' => { 'src' => HTTP_PROTOCOLS },
 | 
			
		||||
      },
 | 
			
		||||
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user