Skip to content

Commit a01be60

Browse files
Update modules/ROOT/pages/8.5.0-release-notes.adoc
Co-authored-by: Mitchell Crompton <mitchell.crompton@tiny.cloud>
1 parent 4358a32 commit a01be60

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

modules/ROOT/pages/8.5.0-release-notes.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,7 @@ In {productname} {release-version}, `script` elements that are considered valid
120120
=== Iframe elements with children would incorrectly be removed by DOMPurify
121121
// #TINY-9655
122122

123-
Previously, `iframe` elements that contained child nodes were removed entirely during the sanitization process, even when the editor configuration allowed iframes. DOMPurify treated the presence of child nodes within an `iframe` as a potential mXSS risk and stripped the entire element from the content.
123+
Previously, `iframe` elements that contained child nodes were removed entirely during the sanitization process. DOMPurify treated the presence of child nodes within an `iframe` as a potential mXSS risk and stripped the entire element from the content.
124124

125125
In {productname} {release-version}, `iframe` elements are preserved during sanitization. Any child nodes and unsafe or invalid attributes are removed, but the `iframe` element itself remains in the editor content.
126126

0 commit comments

Comments
 (0)