feat(HTMLPurifer): first step try to allow iframe

YesWiki · Sep 15, 2023 · 616b25e · 616b25e
1 parent 2b963e9
commit 616b25e
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/includes/services/HtmlPurifierService.php b/includes/services/HtmlPurifierService.php
@@ -50,13 +50,20 @@ public function cleanHTML(string $dirty_html): string
                 '_top',
             ]);
 
+            // allow iframe
+            $config->set('HTML.SafeIframe', true);
+            $config->set('HTML.SafeIframeRegexp', '%^https?://.*%');
+
             // set the cache folder
             // doc : http://htmlpurifier.org/live/configdoc/plain.html#Cache.SerializerPath
             if (!is_dir(self::HTMLPURIFIER_CACHE_FOLDER)) {
                 mkdir(self::HTMLPURIFIER_CACHE_FOLDER, 0777, true);
             }
             $config->set('Cache.SerializerPath', realpath(self::HTMLPURIFIER_CACHE_FOLDER));
 
+            $def = $config->getHTMLDefinition(true);
+            $def->addAttribute('iframe', 'allowfullscreen', 'Bool');
+
             $this->purifier = new HTMLPurifier($config);
         }