Change HTML sanitization to remove unusable and unused embed tag (#34021)

This commit is contained in:
Claire authored and GitHub committed 2025-02-27 10:12:58 +00:00
1 parent cde3167d09
commit f5c4022a20
1 file changed
+1 -3
+1 -3
View File
@@ -131,18 +131,16 @@ class Sanitize
)
MASTODON_OEMBED = freeze_config(
elements: %w(audio embed iframe source video),
elements: %w(audio iframe source video),
attributes: {
'audio' => %w(controls),
'embed' => %w(height src type width),
'iframe' => %w(allowfullscreen frameborder height scrolling src width),
'source' => %w(src type),
'video' => %w(controls height loop width),
},
protocols: {
'embed' => { 'src' => HTTP_PROTOCOLS },
'iframe' => { 'src' => HTTP_PROTOCOLS },
'source' => { 'src' => HTTP_PROTOCOLS },
},