Iframes being stripped from pen.lumbung.space posts #58

Open
opened 2022-06-17 08:53:31 +00:00 by aadil · 1 comment
Owner
See this: https://lumbung.space/pen/pen.lumbung.space/cinema-banner-mural-painting-britto-arts-trust/ versus this where the iframe is visible https://pen.lumbung.space/2022/06/15/cinema-banner-mural-painting-britto-arts-trust/
Member

By default the feed parser discards iframes etc to prevent xss attacks. I've enabled iframes in Konfluks for video embeds etc but did so based on an allow-list of sources. Adding this source to the allow-list would make it work!

https://git.autonomic.zone/ruangrupa/konfluks/src/branch/main/konfluks/feed.py#L236

By default the feed parser discards iframes etc to prevent xss attacks. I've enabled iframes in Konfluks for video embeds etc but did so based on an allow-list of sources. Adding this source to the allow-list would make it work! https://git.autonomic.zone/ruangrupa/konfluks/src/branch/main/konfluks/feed.py#L236
Sign in to join this conversation.
No Milestone
No project
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: ruangrupa/lumbung.space#58
No description provided.