github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-06 23:07:28 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: set max-height property for iframes (#22084)

Browse Source 
Co-authored-by: David Battersby <info@davidbattersby.com>
This commit is contained in:
Blake Erickson
2023-06-13 11:07:32 -06:00
committed by GitHub
parent 4cb3412a56
commit e576fdbe3a
3 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/stylesheets/common/base/topic-post.scss
View File

@ -1536,6 +1536,11 @@ span.mention {
} }
} }
iframe {
max-width: 100%;
max-height: #{"min(1000px, 200vh)"};
}
.post-admin-menu { .post-admin-menu {
display: inline-flex; display: inline-flex;
flex-direction: column; flex-direction: column;

4
app/assets/stylesheets/desktop/topic-post.scss
View File

@ -373,10 +373,6 @@ button.expand-post {
margin-left: var(--topic-body-width-padding); margin-left: var(--topic-body-width-padding);
} }
iframe {
max-width: 100%;
}
video { video {
max-height: 500px; max-height: 500px;
} }

4
app/assets/stylesheets/mobile/topic-post.scss
View File

@ -276,10 +276,6 @@ span.post-count {
z-index: z("tooltip"); z-index: z("tooltip");
} }
iframe {
max-width: 100%;
}
.btn-group { .btn-group {
margin-top: 25px; margin-top: 25px;
position: relative; position: relative;