harden iframe protocols just in case

This commit is contained in:
Athou
2026-10-13 13:22:46 +02:00
parent 44147cc062
commit 6e7a8c1ef6
2 changed files with 3 additions and 2 deletions

View File

@@ -15,7 +15,7 @@ class FeedEntryContentCleaningServiceTest {
<p>
Some text
<img width="965" height="320" src="https://localhost/an-image.png" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="alt-desc" decoding="async" sizes="(max-width: 965px) 100vw, 965px" style="width: 100%; opacity: 0">
<iframe src="url" style="width: 100%; opacity: 0"></iframe>
<iframe src="https://localhost/an-iframe" style="width: 100%; opacity: 0"></iframe>
<forbidden-element>aaa</forbidden-element>
""";
String result = feedEntryContentCleaningService.clean(content, "baseUri", false);
@@ -25,7 +25,7 @@ class FeedEntryContentCleaningServiceTest {
<p>
Some text
<img width="965" height="320" src="https://localhost/an-image.png" alt="alt-desc" style="width:100%;">
<iframe src="url" style="width:100%;"></iframe>
<iframe src="https://localhost/an-iframe" style="width:100%;"></iframe>
aaa
</p>
"""