Change HTML sanitization to remove unusable and unused embed tag (#34021)
				
					
				
			This commit is contained in:
		
							parent
							
								
									cde3167d09
								
							
						
					
					
						commit
						f5c4022a20
					
				@ -131,18 +131,16 @@ class Sanitize
 | 
				
			|||||||
    )
 | 
					    )
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    MASTODON_OEMBED = freeze_config(
 | 
					    MASTODON_OEMBED = freeze_config(
 | 
				
			||||||
      elements: %w(audio embed iframe source video),
 | 
					      elements: %w(audio iframe source video),
 | 
				
			||||||
 | 
					
 | 
				
			||||||
      attributes: {
 | 
					      attributes: {
 | 
				
			||||||
        'audio' => %w(controls),
 | 
					        'audio' => %w(controls),
 | 
				
			||||||
        'embed' => %w(height src type width),
 | 
					 | 
				
			||||||
        'iframe' => %w(allowfullscreen frameborder height scrolling src width),
 | 
					        'iframe' => %w(allowfullscreen frameborder height scrolling src width),
 | 
				
			||||||
        'source' => %w(src type),
 | 
					        'source' => %w(src type),
 | 
				
			||||||
        'video' => %w(controls height loop width),
 | 
					        'video' => %w(controls height loop width),
 | 
				
			||||||
      },
 | 
					      },
 | 
				
			||||||
 | 
					
 | 
				
			||||||
      protocols: {
 | 
					      protocols: {
 | 
				
			||||||
        'embed' => { 'src' => HTTP_PROTOCOLS },
 | 
					 | 
				
			||||||
        'iframe' => { 'src' => HTTP_PROTOCOLS },
 | 
					        'iframe' => { 'src' => HTTP_PROTOCOLS },
 | 
				
			||||||
        'source' => { 'src' => HTTP_PROTOCOLS },
 | 
					        'source' => { 'src' => HTTP_PROTOCOLS },
 | 
				
			||||||
      },
 | 
					      },
 | 
				
			||||||
 | 
				
			|||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user