if loaded over ssl and iframe is whitelisted, set its source to https
This commit is contained in:
parent
bd07626826
commit
c63850fad0
1 changed files with 6 additions and 1 deletions
|
@ -911,8 +911,13 @@
|
|||
foreach ($entries as $entry) {
|
||||
if (!iframe_whitelisted($entry)) {
|
||||
$entry->setAttribute('sandbox', 'allow-scripts');
|
||||
} else {
|
||||
if ($_SERVER['HTTPS'] == "on") {
|
||||
$entry->setAttribute("src",
|
||||
str_replace("http://", "https://",
|
||||
$entry->getAttribute("src")));
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
$allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
|
||||
|
|
Loading…
Reference in a new issue