Link html: render method
Open
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
This does not look safe, as discussed we should investigate how to "safely" render that HTML. The best would be to sandbox it in an iframe to at least not have the potential scripts be running on the main page and thus exposing us to an attack.
Even better would be to only support certain links with their embed and generate the embed content as a component directly.
_Originally posted by @spaenleh in https://github.com/graasp/client/pull/1091#discussion_r2321382924_
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.