Hi Alex,
thanks!
And in case it's a personal private wiki one could even outcomment the new
syntax element and eliminate the check for an <iframe prefix, just use
"prin Lnk", and then embed any kind of html, not just an iframe.
Cheers
Thorsten


Alexander Burger <a...@software-lab.de> schrieb am Do., 13. Okt. 2022, 08:24:

> Hi Thorsten,
>
> > I thought about security too. I even would like to have 2 embed options,
> > one only for iframes, the other for any html (produced by an external
> tool)
>
> This is indeed a potential security risk. A public Wiki can be edited by
> everyone and malicious HTML code might sneak in.
>
> As discussed yesterday, I commented the change in the release and on the
> public
> site. It is useful in environments where edit access is controlled, so it
> can be
> un-commented in such cases.
>
> Released.
>
> ☺/ A!ex
>
> --
> UNSUBSCRIBE: mailto:picolisp@software-lab.de?subject=Unsubscribe
>

Reply via email to