Can i allow frames inside html using Sanitizer.GetSafeHtmlFragment?

Jun 3, 2011 at 8:39 AM

Hi,

i am using Sanitizer.GetSafeHtmlFragment to allow only safe user input html tags . I suppose frame html tags are considered unsafe and get removed, but is it possible to an exception rule and allow frame html tags? If not, is there any alternative solution?

thanks

Coordinator
Jun 3, 2011 at 12:15 PM

frame tags are dangerous - with those you can embed pretty much anything, hence them being stripped. The safe list is not configurable I'm afraid.

Jun 5, 2011 at 6:59 PM

Ok, no problem.