discourse/db/migrate/20250415224422_update_allowed_iframes_codepen_stricter_default.rb

# frozen_string_literal: true
class UpdateAllowedIframesCodepenStricterDefault < ActiveRecord::Migration[7.2]
  def change
    prev_value =
      DB.query_single("SELECT value FROM site_settings WHERE name = 'allowed_iframes'").first

    return if prev_value.blank?

    new_value =
      prev_value.gsub(
        %r{(^|\|)https://codepen\.io/($|\|)},
        '\1https://codepen.io/*/embed/preview/\2',
      )

    return if new_value == prev_value

    DB.exec(<<~SQL, new_value:)
      UPDATE site_settings
      SET value = :new_value
      WHERE name = 'allowed_iframes'
    SQL

    DB.exec(<<~SQL, prev_value:, new_value:)
      INSERT INTO user_histories (action, subject, previous_value, new_value, admin_only, updated_at, created_at, acting_user_id)
      VALUES (3, 'allowed_iframes', :prev_value, :new_value, true, NOW(), NOW(), -1)
    SQL
  end
end