Iframes being stripped from pen.lumbung.space posts #58

New Issue

2022-06-17T08:53:31Z

aadil commented

2022-06-17 08:53:31 +00:00

See this: https://lumbung.space/pen/pen.lumbung.space/cinema-banner-mural-painting-britto-arts-trust/

versus this where the iframe is visible

https://pen.lumbung.space/2022/06/15/cinema-banner-mural-painting-britto-arts-trust/

See this: https://lumbung.space/pen/pen.lumbung.space/cinema-banner-mural-painting-britto-arts-trust/ versus this where the iframe is visible https://pen.lumbung.space/2022/06/15/cinema-banner-mural-painting-britto-arts-trust/

r commented

2022-08-17 07:52:05 +00:00

By default the feed parser discards iframes etc to prevent xss attacks. I've enabled iframes in Konfluks for video embeds etc but did so based on an allow-list of sources. Adding this source to the allow-list would make it work!

https://git.autonomic.zone/ruangrupa/konfluks/src/branch/main/konfluks/feed.py#L236

By default the feed parser discards iframes etc to prevent xss attacks. I've enabled iframes in Konfluks for video embeds etc but did so based on an allow-list of sources. Adding this source to the allow-list would make it work! https://git.autonomic.zone/ruangrupa/konfluks/src/branch/main/konfluks/feed.py#L236

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: ruangrupa/lumbung.space#58