Commitdc0459e

committed

chore(editor): add iframe sanitizer case

1 parent2a76015 commitdc0459eCopy full SHA for dc0459e

File tree

+22

-0

lines changed

+22

-0

lines changed

Lines changed: 12 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,18 @@ defmodule Helper.Converter.HtmlSanitizer do`
`36`	`36`	`Meta.allow_tag_with_these_attributes("ol",["class"])`
`37`	`37`	`Meta.allow_tag_with_these_attributes("li",["class"])`
`38`	`38`
	`39`	`+Meta.allow_tag_with_these_attributes("iframe",[`
	`40`	`+"sandbox",`
	`41`	`+"allow-same-origin",`
	`42`	`+"allow-popups",`
	`43`	`+"allow-presentation",`
	`44`	`+"src",`
	`45`	`+"frameborder",`
	`46`	`+"allow",`
	`47`	`+"allowfullscreen",`
	`48`	`+"style"`
	`49`	`+])`
	`50`	`+`
`39`	`51`	`Meta.strip_everything_not_covered()`
`40`	`52`	`end`
`41`	`53`

Lines changed: 10 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -47,5 +47,15 @@ defmodule GroupherServer.Test.Helper.Converter.HtmlSanitizer do`
`47`	`47`	`html="This <form>is</form> <i class=\"cool-look\" other=\"other\">text</i>"`
`48`	`48`	`assertSanitizer.sanitize(html)=="This is <i>text</i>"`
`49`	`49`	`end`
	`50`	`+`
	`51`	`+@tag:wip2`
	`52`	`+test"allow iframe with valid attr"do`
	`53`	`+html="""`
	`54`	`+ <iframe sandbox="allow-scripts allow-same-origin allow-presentation" src="addr" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen="" style="width: 100%; height: 300px;" invalidprops></iframe>`
	`55`	`+ """`
	`56`	`+`
	`57`	`+assertSanitizer.sanitize(html)==`
	`58`	`+"<iframe sandbox=\"allow-scripts allow-same-origin allow-presentation\" src=\"addr\" frameborder=\"0\" allow=\"autoplay; encrypted-media\" allowfullscreen=\"\" style=\"width: 100%; height: 300px;\"></iframe>\n"`
	`59`	`+end`
`50`	`60`	`end`
`51`	`61`	`end`

Comments

(0)