fix: add poster attribute to configuredXss

This commit is contained in:
tdgao
2026-03-23 11:17:26 -06:00
parent a3eb981058
commit 4783526c3a
+1 -1
View File
@@ -82,7 +82,7 @@ export const configuredXss = new FilterXSS({
safeAttrValue(tag, name, value, cssFilter) { safeAttrValue(tag, name, value, cssFilter) {
if ( if (
(tag === 'img' || tag === 'video' || tag === 'audio' || tag === 'source') && (tag === 'img' || tag === 'video' || tag === 'audio' || tag === 'source') &&
(name === 'src' || name === 'srcset') && (name === 'src' || name === 'srcset' || name === 'poster') &&
!value.startsWith('data:') !value.startsWith('data:')
) { ) {
try { try {