Modified HTMLPurifier Configuration

1 files changed, 6 insertions, 3 deletions

diff --git a/dependencyinjection/dicontainer.php b/dependencyinjection/dicontainer.php
index cc1d517ef..b5a3b41b1 100644
--- a/dependencyinjection/dicontainer.php
+++ b/dependencyinjection/dicontainer.php
@@ -98,9 +98,12 @@ class DIContainer extends BaseContainer {
 
 			$config = \HTMLPurifier_Config::createDefault();
 			$config->set('Cache.SerializerPath', $directory);
-			$config->set('HTML.SafeIframe', true);
-			$config->set('URI.SafeIframeRegexp', 
-				'%^http://(www.youtube(?:-nocookie)?.com/embed/|player.vimeo.com/video/)%'); //allow YouTube and Vimeo
+                        $config->set('HTML.SafeIframe', true);
+                        $config->set('HTML.SafeObject', true);
+                        $config->set('HTML.SafeEmbed', true);
+                        $config->set('Output.FlashCompat', true);
+                        $config->set('URI.SafeIframeRegexp',
+                                '%^(http[s]?:)?//(www.youtube(?:-nocookie)?.com/embed/|player.vimeo.com/video/|w.soundcloud.com/player/)%'); //allow YouTube, Vimeo and Soundcloud iframes
 			return new \HTMLPurifier($config);
 		});