mirrors/btcpayserver
1
0
Fork 0
mirror of https://github.com/btcpayserver/btcpayserver.git synced 2025-02-20 13:34:37 +01:00
Code Issues Projects Releases Packages Wiki Activity

Fix EmbeddedCSS being ignored, stripped by sanitizer

Browse source
This commit is contained in:
nicolas.dorier 2020-07-30 11:36:33 +09:00
parent 1fb75c908b
commit 7974633bba
No known key found for this signature in database
GPG key ID: 6618763EF09186FE
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
BTCPayServer/Hosting/BTCPayServerServices.cs
View file

@ -172,6 +172,7 @@ namespace BTCPayServer.Hosting
htmlSanitizer.RemovingStyle += (sender, args) => { args.Cancel = true; };
htmlSanitizer.AllowedAttributes.Add("class");
htmlSanitizer.AllowedTags.Add("iframe");
htmlSanitizer.AllowedTags.Add("style");
htmlSanitizer.AllowedTags.Remove("img");
htmlSanitizer.AllowedAttributes.Add("webkitallowfullscreen");
htmlSanitizer.AllowedAttributes.Add("allowfullscreen");