Skip to content

Commit aec2a38

Browse files
committed
feat: Allow iframe tags in sanitized HTML content for custom blocks
1 parent 2e0cd3d commit aec2a38

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

app/helpers/better_together/content/blocks_helper.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ def temp_id_for(model, temp_id: SecureRandom.uuid)
1717
# Sanitize HTML content for safe rendering in custom blocks
1818
def sanitize_block_html(html)
1919
allowed_tags = %w[p br strong em b i ul ol li a span h1 h2 h3 h4 h5 h6 img figure figcaption blockquote pre
20-
code]
20+
code iframe]
2121
allowed_attrs = %w[href src alt title class target rel]
2222
sanitize(html.to_s, tags: allowed_tags, attributes: allowed_attrs)
2323
end

0 commit comments

Comments
 (0)