fix: add poster attribute to configuredXss (#5646)

2026-03-23 10:27:59 -07:00
parent a3eb981058
commit 67fd759d9b
1 changed files with 1 additions and 1 deletions
--- a/packages/utils/parse.ts
+++ b/packages/utils/parse.ts
@@ -82,7 +82,7 @@ export const configuredXss = new FilterXSS({
 	safeAttrValue(tag, name, value, cssFilter) {
 		if (
 			(tag === 'img' || tag === 'video' || tag === 'audio' || tag === 'source') &&
-			(name === 'src' || name === 'srcset') &&
+			(name === 'src' || name === 'srcset' || name === 'poster') &&
 			!value.startsWith('data:')
 		) {
 			try {