diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2024-04-11 08:48:50 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2024-04-11 08:48:50 +0200 |
| commit | 7aaed6092f09b73b2deb7e32a1fed9b776c0202d (patch) | |
| tree | 900c9284e458b7b1b4acd1a6565d322cce9541e6 /config.default.php | |
| parent | 30f147410d30deb0433ca53a9eec29c7b477e382 (diff) | |
SimplePie replace iframe allow attribute (#6274)
* SimplePie strip iframe allow attribute
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#allow
Besides security, the `allow autoplay` atttribute is especially problematic on mobile (Firefox on Android) as it asks to open the YouTube app as soon as the article is opened.
Example of code before:
```html
<iframe data-original="https://www.youtube.com/embed/??????feature=oembed" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="" sandbox="allow-scripts allow-same-origin"></iframe>
```
* Replace allow attribute
* Allow more
Diffstat (limited to 'config.default.php')
0 files changed, 0 insertions, 0 deletions