fix: Sanitize url missing in editor embeds and widgets
This commit is contained in:
@@ -5,6 +5,7 @@ import * as React from "react";
|
||||
import styled from "styled-components";
|
||||
import { Optional } from "utility-types";
|
||||
import { s } from "../../styles";
|
||||
import { sanitizeUrl } from "../../utils/urls";
|
||||
|
||||
type Props = Omit<Optional<HTMLIFrameElement>, "children"> & {
|
||||
src?: string;
|
||||
@@ -81,7 +82,7 @@ class Frame extends React.Component<PropsWithRef> {
|
||||
frameBorder="0"
|
||||
title="embed"
|
||||
loading="lazy"
|
||||
src={src}
|
||||
src={sanitizeUrl(src)}
|
||||
referrerPolicy={referrerPolicy}
|
||||
allowFullScreen
|
||||
/>
|
||||
|
||||
Reference in New Issue
Block a user