Allow iframes for blog

3 files changed, 7 insertions, 5 deletions

diff --git a/app.js b/app.js
index 0c1872f..969492f 100644
--- a/app.js
+++ b/app.js
@@ -95,7 +95,7 @@ class App {
                             try {
                                 const window = new JSDOM('').window
                                 const DOMPurify = createDOMPurify(window)
-                                const clean = DOMPurify.sanitize(output.layouts.header + output.layouts.data + output.layouts.footer)
+                                const clean = DOMPurify.sanitize(output.layouts.header + output.layouts.data + output.layouts.footer, { ADD_TAGS: ["iframe"], ADD_ATTR: ['allow', 'allowfullscreen', 'frameborder', 'scrolling'] })
                                 res.send(clean)
                             } catch (err) {
                                 logger.Error(err)
diff --git a/assets/js/main.js b/assets/js/main.js
index a0c714b..4932e53 100644
--- a/assets/js/main.js
+++ b/assets/js/main.js
@@ -87,7 +87,7 @@ const getBlog = async (x) => {
             res('success')
         })
         prism.then(output => {
-            main.body.innerHTML = DOMPurify.sanitize(text)
+            main.body.innerHTML = DOMPurify.sanitize(text, { ADD_TAGS: ["iframe"], ADD_ATTR: ['allow', 'allowfullscreen', 'frameborder', 'scrolling'] })
             eventListener()
             window.scrollTo(0, 0)
         })
diff --git a/source/blog.js b/source/blog.js
index 22a7cfc..cc654dd 100644
--- a/source/blog.js
+++ b/source/blog.js
@@ -2,9 +2,11 @@ const fs = require('fs')
 const path = require('path')
 const markdownit = require('markdown-it')
 const md = markdownit({
-  typographer: {
-    whitespace: 'all'
-  }
+    html: true,
+    breaks: true,
+    typographer: {
+        whitespace: 'all'
+    },
 })
 const logger = require('./logger')()