From 4783526c3a2d7442a42769ae7ba9a14939b33a5d Mon Sep 17 00:00:00 2001 From: tdgao Date: Mon, 23 Mar 2026 11:17:26 -0600 Subject: [PATCH] fix: add poster attribute to configuredXss --- packages/utils/parse.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/utils/parse.ts b/packages/utils/parse.ts index 646caa5ae7..fcf8b9d615 100644 --- a/packages/utils/parse.ts +++ b/packages/utils/parse.ts @@ -82,7 +82,7 @@ export const configuredXss = new FilterXSS({ safeAttrValue(tag, name, value, cssFilter) { if ( (tag === 'img' || tag === 'video' || tag === 'audio' || tag === 'source') && - (name === 'src' || name === 'srcset') && + (name === 'src' || name === 'srcset' || name === 'poster') && !value.startsWith('data:') ) { try {