Allow iframes for blog

1 files changed, 1 insertions, 1 deletions

diff --git a/app.js b/app.js
index 0c1872f..969492f 100644
--- a/app.js
+++ b/app.js
@@ -95,7 +95,7 @@ class App {
                             try {
                                 const window = new JSDOM('').window
                                 const DOMPurify = createDOMPurify(window)
-                                const clean = DOMPurify.sanitize(output.layouts.header + output.layouts.data + output.layouts.footer)
+                                const clean = DOMPurify.sanitize(output.layouts.header + output.layouts.data + output.layouts.footer, { ADD_TAGS: ["iframe"], ADD_ATTR: ['allow', 'allowfullscreen', 'frameborder', 'scrolling'] })
                                 res.send(clean)
                             } catch (err) {
                                 logger.Error(err)