Browse Source

remove srcdoc from whitelist

Naoki427 9 months ago
parent
commit
1e8f7a8cfb
1 changed files with 1 additions and 1 deletions
  1. 1 1
      apps/app/src/services/renderer/recommended-whitelist.ts

+ 1 - 1
apps/app/src/services/renderer/recommended-whitelist.ts

@@ -47,7 +47,7 @@ export const tagNames: Array<string> = [
 export const attributes: Attributes = deepmerge(
 export const attributes: Attributes = deepmerge(
   relaxedSchemaAttributes,
   relaxedSchemaAttributes,
   {
   {
-    iframe: ['allow', 'referrerpolicy', 'sandbox', 'src', 'srcdoc'],
+    iframe: ['allow', 'referrerpolicy', 'sandbox', 'src'],
     video: ['controls', 'src', 'muted', 'preload', 'width', 'height', 'autoplay'],
     video: ['controls', 'src', 'muted', 'preload', 'width', 'height', 'autoplay'],
     // The special value 'data*' as a property name can be used to allow all data properties.
     // The special value 'data*' as a property name can be used to allow all data properties.
     // see: https://github.com/syntax-tree/hast-util-sanitize/
     // see: https://github.com/syntax-tree/hast-util-sanitize/