Skip to content

Commit 334c134

Browse files
authored
Merge pull request #1993 from umbraco/v14/bugfix/tinymce-unsafe-embeds
Bugfix: Tinymce allows potentially unsafe embeds
2 parents 4a0c2d9 + be1562e commit 334c134

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

src/packages/tiny-mce/components/input-tiny-mce/input-tiny-mce.element.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -243,6 +243,7 @@ export class UmbInputTinyMceElement extends UUIFormControlMixin(UmbLitElement, '
243243
paste_data_images: false,
244244
language: this.#getLanguage(),
245245
promotion: false,
246+
convert_unsafe_embeds: true, // [JOV] Workaround for CVE-2024-29881
246247

247248
// Extend with configuration options
248249
...configurationOptions,

0 commit comments

Comments
 (0)