This allows us to support more attributes while not opening the door to XSS attacks.

CommentFileSizeAuthor
#1 856694_media_whitelist.patch3.87 KBJacobSingh

Comments

JacobSingh’s picture

JacobSingh commented
Status: Active » Fixed
StatusFileSize
new 856694_media_whitelist.patch3.87 KB

committed

aaron’s picture

aaron commented

for fine tuning & future support, might want a hook_media_attributes_whitelist_alter() or something?

aaron’s picture

aaron commented

or maybe using media_variable_get('whitelist') so it can at least be overridden by $conf

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.