Skip to content

Commit

Permalink
Modify codeviewFilter: true so setting is opt out rather than opt in.
Browse files Browse the repository at this point in the history
This is after a discussion on PR#3782 to set the filter to true, so it becomes an opt out option rather than opt in to filtering options are on by default due to XSS issues referenced to the PR#3782
  • Loading branch information
Dennis Suitters committed Dec 1, 2020
1 parent b3ae852 commit 9408255
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/js/base/settings.js
Original file line number Diff line number Diff line change
Expand Up @@ -232,7 +232,7 @@ $.summernote = $.extend($.summernote, {
lineNumbers: true,
},

codeviewFilter: false,
codeviewFilter: true,
codeviewFilterRegex: /<\/*(?:applet|b(?:ase|gsound|link)|embed|frame(?:set)?|ilayer|l(?:ayer|ink)|meta|object|s(?:cript|tyle)|t(?:itle|extarea)|xml)[^>]*?>/gi,
codeviewIframeFilter: true,
codeviewIframeWhitelistSrc: [],
Expand Down

0 comments on commit 9408255

Please sign in to comment.