fix: iframe rendering (#3916)

* fix iframe rendering * fix eslint check
usememos · Sep 12, 2024 · 6f3d576 · 6f3d576
1 parent 42bc769
commit 6f3d576
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/web/src/components/MemoContent/CodeBlock.tsx b/web/src/components/MemoContent/CodeBlock.tsx
@@ -25,7 +25,17 @@ const CodeBlock: React.FC<Props> = ({ language, content }: Props) => {
   // Users can set Markdown code blocks as `__html` to render HTML directly.
   if (formatedLanguage === SpecialLanguage.HTML) {
     const purify = DOMPurify(window);
-    return <div className="w-full overflow-auto !my-2" dangerouslySetInnerHTML={{ __html: purify.sanitize(content) }} />;
+    return (
+      <div
+        className="w-full overflow-auto !my-2"
+        dangerouslySetInnerHTML={{
+          __html: purify.sanitize(content, {
+            ALLOWED_TAGS: ["iframe"],
+            ADD_ATTR: ["allow", "allowfullscreen", "frameborder", "scrolling"],
+          }),
+        }}
+      />
+    );
   } else if (formatedLanguage === SpecialLanguage.MERMAID) {
     return <MermaidBlock content={content} />;
   }