diff --git a/commafeed-server/src/main/java/com/commafeed/backend/service/FeedEntryContentCleaningService.java b/commafeed-server/src/main/java/com/commafeed/backend/service/FeedEntryContentCleaningService.java index eaf83849..6f04e7ab 100644 --- a/commafeed-server/src/main/java/com/commafeed/backend/service/FeedEntryContentCleaningService.java +++ b/commafeed-server/src/main/java/com/commafeed/backend/service/FeedEntryContentCleaningService.java @@ -148,6 +148,7 @@ public class FeedEntryContentCleaningService { whitelist.addProtocols("a", "href", "ftp", "http", "https", "magnet", "mailto"); whitelist.addProtocols("blockquote", "cite", "http", "https"); + whitelist.addProtocols("iframe", "src", "http", "https"); whitelist.addProtocols("img", "src", "http", "https"); whitelist.addProtocols("q", "cite", "http", "https"); diff --git a/commafeed-server/src/test/java/com/commafeed/backend/service/FeedEntryContentCleaningServiceTest.java b/commafeed-server/src/test/java/com/commafeed/backend/service/FeedEntryContentCleaningServiceTest.java index fbd9aea7..82515921 100644 --- a/commafeed-server/src/test/java/com/commafeed/backend/service/FeedEntryContentCleaningServiceTest.java +++ b/commafeed-server/src/test/java/com/commafeed/backend/service/FeedEntryContentCleaningServiceTest.java @@ -15,7 +15,7 @@ class FeedEntryContentCleaningServiceTest {

Some text alt-desc - + aaa """; String result = feedEntryContentCleaningService.clean(content, "baseUri", false); @@ -25,7 +25,7 @@ class FeedEntryContentCleaningServiceTest {

Some text alt-desc - + aaa

"""