Blacklist vs whitelist onebox

Contribute Feature
10

Yeah I think only oEmbed needs whitelisting, and even then most of the oEmbed returns are unusable due to <script>s.

2 « J'aime »