fix: escape mustache template chars in content

2020-05-08 17:00:02 -04:00
parent 2ff0e42c1d
commit 98bf0d9ccb
5 changed files with 207 additions and 54 deletions
--- a/server/modules/rendering/html-security/definition.yml
+++ b/server/modules/rendering/html-security/definition.yml
@@ -13,3 +13,10 @@ props:
    title: Sanitize HTML
    default: true
    hint: Sanitize HTML from unsafe attributes and tags that could lead to XSS attacks
+    order: 1
+  allowIFrames:
+    type: Boolean
+    title: Allow iframes
+    default: false
+    hint: iframes will not be stripped if enabled. (Not recommended)
+    order: 2