diff options
-rw-r--r-- | lib/AppInfo/Application.php | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/lib/AppInfo/Application.php b/lib/AppInfo/Application.php index faafa471c..ef60c538e 100644 --- a/lib/AppInfo/Application.php +++ b/lib/AppInfo/Application.php @@ -153,6 +153,20 @@ class Application extends App 'player.vimeo.com/video/|' . 'vk.com/video_ext.php)%' ); //allow YouTube and Vimeo + + // Additionally to the defaults, allow the data URI scheme. + // See http://htmlpurifier.org/live/configdoc/plain.html#URI.AllowedSchemes + $config->set('URI.AllowedSchemes', [ + 'http' => true, + 'https' => true, + 'data' => true, + 'mailto' => true, + 'ftp' => true, + 'nntp' => true, + 'news' => true, + 'tel' => true, + ]); + $def = $config->getHTMLDefinition(true); $def->addAttribute('iframe', 'allowfullscreen', 'Bool'); return new HTMLPurifier($config); |