Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SECURITY: set max-height property for iframes (#22089) 

Co-authored-by: David Battersby <info@davidbattersby.com>
This commit is contained in:
Blake Erickson 2023-06-13 11:09:40 -06:00 committed by GitHub
parent 5e3106387f
commit a891e06989
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/stylesheets/common/base/topic-post.scss
View File

@ -1525,6 +1525,11 @@ span.mention {
} }
} }
iframe {
max-width: 100%;
max-height: #{"min(1000px, 200vh)"};
}
.post-admin-menu { .post-admin-menu {
display: inline-flex; display: inline-flex;
flex-direction: column; flex-direction: column;

4
app/assets/stylesheets/desktop/topic-post.scss
View File

@ -373,10 +373,6 @@ button.expand-post {
margin-left: var(--topic-body-width-padding); margin-left: var(--topic-body-width-padding);
} }
iframe {
max-width: 100%;
}
video { video {
max-height: 500px; max-height: 500px;
} }

4
app/assets/stylesheets/mobile/topic-post.scss
View File

@ -276,10 +276,6 @@ span.post-count {
z-index: z("tooltip"); z-index: z("tooltip");
} }
iframe {
max-width: 100%;
}
.btn-group { .btn-group {
margin-top: 25px; margin-top: 25px;
position: relative; position: relative;