Compare commits

...
Author SHA1 Message Date
tdgao 4783526c3a fix: add poster attribute to configuredXss 2026-03-23 11:17:26 -06:00
+1 -1
View File
@@ -82,7 +82,7 @@ export const configuredXss = new FilterXSS({
safeAttrValue(tag, name, value, cssFilter) {
if (
(tag === 'img' || tag === 'video' || tag === 'audio' || tag === 'source') &&
(name === 'src' || name === 'srcset') &&
(name === 'src' || name === 'srcset' || name === 'poster') &&
!value.startsWith('data:')
) {
try {