public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-14 05:15:56 +00:00
Code Issues Releases Wiki Activity

detect whether browser supports iframe.sandbox and allow iframes accordingly; allow object and embed elements

Browse Source
This commit is contained in:
Andrew Dolgov
2013-03-19 12:49:55 +04:00
parent 55783ca45c
commit 4f7d69e185
3 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
include/functions.php
View File

@@ -2626,7 +2626,9 @@
$allowed_elements = array('p', 'br', 'div', 'table', 'tr', 'td', 'th',
'ul', 'ol', 'li', 'blockquote', 'span', 'html', 'body', 'a', 'img',
'iframe', 'video', 'audio', 'source');
'video', 'audio', 'source', 'object', 'embed');
if ($_SESSION['hasSandbox']) array_push($allowed_elements, 'iframe');
$disallowed_attributes = array('id', 'style', 'class');