We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 3b8963f commit 8e052adCopy full SHA for 8e052ad
packages/utils/parse.ts
@@ -77,7 +77,11 @@ export const configuredXss = new FilterXSS({
77
}
78
},
79
safeAttrValue(tag, name, value, cssFilter) {
80
- if (tag === 'img' && name === 'src' && !value.startsWith('data:')) {
+ if (
81
+ (tag === 'img' || tag === 'video' || tag === 'audio' || tag === 'source') &&
82
+ (name === 'src' || name === 'srcset') &&
83
+ !value.startsWith('data:')
84
+ ) {
85
try {
86
const url = new URL(value)
87
0 commit comments