Use iframe sandbox for rendering HTML in transformation

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 14:11:45 +02:00 · 2016-07-12 14:11:45 +02:00 · 14fd275811
commit 14fd275811
parent c8297b4718
1 changed files with 4 additions and 2 deletions
--- a/libraries/plugins/transformations/abstract/FormattedTransformationsPlugin.class.php
+++ b/libraries/plugins/transformations/abstract/FormattedTransformationsPlugin.class.php
@ -45,7 +45,9 @@ abstract class FormattedTransformationsPlugin extends TransformationsPlugin
     */
    public function applyTransformation($buffer, $options = array(), $meta = '')
    {
-        return $buffer;
+        return '<iframe srcdoc="'
+            . strtr($buffer, '"', '\'')
+            . '" sandbox=""></iframe>';
    }

    /**
@ -77,4 +79,4 @@ abstract class FormattedTransformationsPlugin extends TransformationsPlugin
        return "Formatted";
    }
 }
-?>
+?>