SECURITY: set max-height property for iframes (#22089)

Co-authored-by: David Battersby <info@davidbattersby.com>
2023-06-13 11:09:40 -06:00 · 2023-06-13 11:09:40 -06:00 · a891e06989
parent 5e3106387f
commit a891e06989
3 changed files with 5 additions and 8 deletions
--- a/app/assets/stylesheets/common/base/topic-post.scss
+++ b/app/assets/stylesheets/common/base/topic-post.scss
@ -1525,6 +1525,11 @@ span.mention {
  }
 }

+iframe {
+  max-width: 100%;
+  max-height: #{"min(1000px, 200vh)"};
+}
+
 .post-admin-menu {
  display: inline-flex;
  flex-direction: column;
--- a/app/assets/stylesheets/desktop/topic-post.scss
+++ b/app/assets/stylesheets/desktop/topic-post.scss
@ -373,10 +373,6 @@ button.expand-post {
  margin-left: var(--topic-body-width-padding);
 }

-iframe {
-  max-width: 100%;
-}
-
 video {
  max-height: 500px;
 }
--- a/app/assets/stylesheets/mobile/topic-post.scss
+++ b/app/assets/stylesheets/mobile/topic-post.scss
@ -276,10 +276,6 @@ span.post-count {
  z-index: z("tooltip");
 }

-iframe {
-  max-width: 100%;
-}
-
 .btn-group {
  margin-top: 25px;
  position: relative;