fix: preserve allowed iframe query parameters (#5295)
Co-authored-by: Prospector <6166773+Prospector@users.noreply.github.com>
This commit is contained in:
@@ -53,7 +53,7 @@ export const configuredXss = new FilterXSS({
|
|||||||
continue
|
continue
|
||||||
}
|
}
|
||||||
|
|
||||||
const newSearchParams = new URLSearchParams()
|
const newSearchParams = new URLSearchParams(url.searchParams)
|
||||||
url.searchParams.forEach((value, key) => {
|
url.searchParams.forEach((value, key) => {
|
||||||
if (!source.allowedParameters.some((param) => param.test(`${key}=${value}`))) {
|
if (!source.allowedParameters.some((param) => param.test(`${key}=${value}`))) {
|
||||||
newSearchParams.delete(key)
|
newSearchParams.delete(key)
|
||||||
|
|||||||
Reference in New Issue
Block a user