From 29c3b61a511b96360b897ed7bda5a095aabc474f Mon Sep 17 00:00:00 2001
From: Mhykol <mchaeldonald62@pm.me>
Date: Sun, 19 May 2024 13:47:13 -0400
Subject: Allow iframes for blog

---
 app.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'app.js')

diff --git a/app.js b/app.js
index 0c1872f..969492f 100644
--- a/app.js
+++ b/app.js
@@ -95,7 +95,7 @@ class App {
                             try {
                                 const window = new JSDOM('').window
                                 const DOMPurify = createDOMPurify(window)
-                                const clean = DOMPurify.sanitize(output.layouts.header + output.layouts.data + output.layouts.footer)
+                                const clean = DOMPurify.sanitize(output.layouts.header + output.layouts.data + output.layouts.footer, { ADD_TAGS: ["iframe"], ADD_ATTR: ['allow', 'allowfullscreen', 'frameborder', 'scrolling'] })
                                 res.send(clean)
                             } catch (err) {
                                 logger.Error(err)
-- 
cgit v1.2.3-70-g09d2