aljaz/btcpayserver
1
0
Fork 0
mirror of https://github.com/aljazceru/btcpayserver.git synced 2026-01-04 22:54:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix EmbeddedCSS being ignored, stripped by sanitizer

Browse Source
This commit is contained in:
nicolas.dorier
2020-07-30 11:36:33 +09:00
parent 1fb75c908b
commit 7974633bba
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
BTCPayServer/Hosting/BTCPayServerServices.cs
View File

@@ -172,6 +172,7 @@ namespace BTCPayServer.Hosting
htmlSanitizer.RemovingStyle += (sender, args) => { args.Cancel = true; };
htmlSanitizer.AllowedAttributes.Add("class");
htmlSanitizer.AllowedTags.Add("iframe");
htmlSanitizer.AllowedTags.Add("style");
htmlSanitizer.AllowedTags.Remove("img");
htmlSanitizer.AllowedAttributes.Add("webkitallowfullscreen");
htmlSanitizer.AllowedAttributes.Add("allowfullscreen");