fix: remove attributes and protocols

2022-10-06 15:30:33 +03:00 · 2022-10-06 15:30:33 +03:00 · 60790763dd
parent c5ebca26b6
commit 60790763dd
1 changed files with 1 additions and 8 deletions
--- a/src/main/frontend/security.cljs
+++ b/src/main/frontend/security.cljs
@ -2,14 +2,7 @@
  "Provide security focused fns like preventing XSS attacks"
  (:require ["dompurify" :as DOMPurify]))

-(def sanitization-options (clj->js {:ADD_TAGS ["iframe"]
-                                    :ALLOW_UNKNOWN_PROTOCOLS true
-                                    :ADD_ATTR ["allow"
-                                               "src"
-                                               "allowfullscreen"
-                                               "frameborder"
-                                               "scrolling"
-                                               "target"]}))
+(def sanitization-options (clj->js {:ADD_TAGS ["iframe"]}))

 (defn sanitize-html
  [html]