From e80d7730cab3d499d01acd5084384082de1f0bc6 Mon Sep 17 00:00:00 2001
From: Kevin <66999025+DAQEM@users.noreply.github.com>
Date: Mon, 9 Feb 2026 16:17:37 +0100
Subject: [PATCH] fix: preserve allowed iframe query parameters (#5295)

Co-authored-by: Prospector <6166773+Prospector@users.noreply.github.com>
---
 packages/utils/parse.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/utils/parse.ts b/packages/utils/parse.ts
index 0ec93bdd3..4011141c8 100644
--- a/packages/utils/parse.ts
+++ b/packages/utils/parse.ts
@@ -53,7 +53,7 @@ export const configuredXss = new FilterXSS({
 					continue
 				}
 
-				const newSearchParams = new URLSearchParams()
+				const newSearchParams = new URLSearchParams(url.searchParams)
 				url.searchParams.forEach((value, key) => {
 					if (!source.allowedParameters.some((param) => param.test(`${key}=${value}`))) {
 						newSearchParams.delete(key)