Archives/Athou_commafeed
1
0
Fork 1
mirror of https://github.com/Athou/commafeed.git synced 2026-10-28 16:09:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

harden iframe protocols just in case

Browse Source
This commit is contained in:
Athou
2026-10-13 13:22:46 +02:00
parent 44147cc062
commit 6e7a8c1ef6
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
commafeed-server/src/main/java/com/commafeed/backend/service/FeedEntryContentCleaningService.java
View File

@@ -148,6 +148,7 @@ public class FeedEntryContentCleaningService {
whitelist.addProtocols("a", "href", "ftp", "http", "https", "magnet", "mailto");
whitelist.addProtocols("blockquote", "cite", "http", "https");
whitelist.addProtocols("iframe", "src", "http", "https");
whitelist.addProtocols("img", "src", "http", "https");
whitelist.addProtocols("q", "cite", "http", "https");