Your editors are trusted. Sanitise anyway.
A tag allow-list cannot say an iframe must point at YouTube. The attribute filter that can, and the wrapper span that quietly bypassed it.
Posts tagged with Quill.
A tag allow-list cannot say an iframe must point at YouTube. The attribute filter that can, and the wrapper span that quietly bypassed it.
Tell us about your needs in IoT, GIS, or custom development — we'll get back to you within 24h.