[5.1] Allow PDF embeding again

Open bembelimen opened this issue 1 year ago • 12 comments

Pull Request for Issue #43407 & #43365 .

Summary of Changes

The security hardening adds an empty "sandbox" attribute to every iframe (read more). This prevents PDFs insert by the media manager loaded (it needs more fine granulated sandbox values)

With TinyMCE 7 you can whitelist certain domains, which will overcome this problem, but till then, this filter is super strict and not usable.

Testing Instructions

Use the media manager to embed a PDF. Save the article and open article in frontpage.

Actual result BEFORE applying this Pull Request

PDF is blocked

Expected result AFTER applying this Pull Request

PDF is visible

Jun 27 '24 20:06 bembelimen