Skip to content

Commit 1407e16

Browse files
committed
fix: exclude name attribute from iframe filterXSS allowlist
Signed-off-by: Yukai Huang <[email protected]>
1 parent d157fde commit 1407e16

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

public/js/render.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ whiteList.style = []
2020
// allow kbd tag
2121
whiteList.kbd = []
2222
// allow ifram tag with some safe attributes
23-
whiteList.iframe = ['allowfullscreen', 'name', 'referrerpolicy', 'src', 'width', 'height']
23+
whiteList.iframe = ['allowfullscreen', 'referrerpolicy', 'src', 'width', 'height']
2424
// allow summary tag
2525
whiteList.summary = []
2626
// allow ruby tag

0 commit comments

Comments
 (0)