Change HTML sanitization to remove unusable and unused embed tag (#34021)

2025-05-07 12:16:14 +00:00 · 2025-02-27 11:12:58 +01:00 · 2025-02-27 11:12:58 +01:00 · f5c4022a20
commit f5c4022a20
parent cde3167d09
1 changed files with 1 additions and 3 deletions
--- a/lib/sanitize_ext/sanitize_config.rb
+++ b/lib/sanitize_ext/sanitize_config.rb
@ -131,18 +131,16 @@ class Sanitize
    )

    MASTODON_OEMBED = freeze_config(
-      elements: %w(audio embed iframe source video),
+      elements: %w(audio iframe source video),

      attributes: {
        'audio' => %w(controls),
-        'embed' => %w(height src type width),
        'iframe' => %w(allowfullscreen frameborder height scrolling src width),
        'source' => %w(src type),
        'video' => %w(controls height loop width),
      },

      protocols: {
-        'embed' => { 'src' => HTTP_PROTOCOLS },
        'iframe' => { 'src' => HTTP_PROTOCOLS },
        'source' => { 'src' => HTTP_PROTOCOLS },
      },