IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

SECURITY: set max-height property for iframes (#22084)

Browse Source 
Co-authored-by: David Battersby <info@davidbattersby.com>
This commit is contained in:
Blake Erickson 2023-06-13 11:07:32 -06:00 committed by GitHub
parent 4cb3412a56
commit e576fdbe3a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/stylesheets/common/base/topic-post.scss
View File

@ -1536,6 +1536,11 @@ span.mention {
}
}
iframe {
max-width: 100%;
max-height: #{"min(1000px, 200vh)"};
}
.post-admin-menu {
display: inline-flex;
flex-direction: column;

4
app/assets/stylesheets/desktop/topic-post.scss
View File

@ -373,10 +373,6 @@ button.expand-post {
margin-left: var(--topic-body-width-padding);
}
iframe {
max-width: 100%;
}
video {
max-height: 500px;
}

4
app/assets/stylesheets/mobile/topic-post.scss
View File

@ -276,10 +276,6 @@ span.post-count {
z-index: z("tooltip");
}
iframe {
max-width: 100%;
}
.btn-group {
margin-top: 25px;
position: relative;