sambruk/excalidraw
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add support for simplePDF in Web-Embeds (#6810)

Browse Source
This commit is contained in:
Benjamin André-Micolon 2023-07-29 11:02:15 +03:00 committed by GitHub
parent 1acc646534
commit 9ca27c62c7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/components/App.tsx
View File

@ -941,7 +941,7 @@ class App extends React.Component<AppProps, AppState> {
title="Excalidraw Embedded Content" title="Excalidraw Embedded Content"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowFullScreen={true} allowFullScreen={true}
sandbox="allow-same-origin allow-scripts allow-forms allow-popups allow-popups-to-escape-sandbox allow-presentation" sandbox="allow-same-origin allow-scripts allow-forms allow-popups allow-popups-to-escape-sandbox allow-presentation allow-downloads"
/> />
)} )}
</div> </div>

10
src/element/embeddable.ts
View File

@ -55,6 +55,7 @@ const ALLOWED_DOMAINS = new Set([
"link.excalidraw.com", "link.excalidraw.com",
"gist.github.com", "gist.github.com",
"twitter.com", "twitter.com",
"*.simplepdf.eu",
"stackblitz.com", "stackblitz.com",
"val.town", "val.town",
]); ]);
@ -274,9 +275,16 @@ const validateHostname = (
const { hostname } = new URL(url); const { hostname } = new URL(url);
const bareDomain = hostname.replace(/^www\./, ""); const bareDomain = hostname.replace(/^www\./, "");
const bareDomainWithFirstSubdomainWildcarded = bareDomain.replace(
/^([^.]+)/,
"*",
);
if (allowedHostnames instanceof Set) { if (allowedHostnames instanceof Set) {
return ALLOWED_DOMAINS.has(bareDomain); return (
ALLOWED_DOMAINS.has(bareDomain) ||
ALLOWED_DOMAINS.has(bareDomainWithFirstSubdomainWildcarded)
);
} }
if (bareDomain === allowedHostnames.replace(/^www\./, "")) { if (bareDomain === allowedHostnames.replace(/^www\./, "")) {