mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 04:02:30 +08:00
7ce032bd12Previously, the `className` passed via `DiscourseEmbed` was applied to the iframe document's `<html>` element in classic embed mode but silently ignored in full app mode — the param was dropped during the `/embed/comments` redirect and the full app's layout never applied it. This change forwards `class_name` through the redirect and applies it to `html_classes` when embed mode is allowed, validated against `/\A[a-zA-Z0-9\-_ ]+\z/` to prevent attribute injection, matching classic embed behaviour. |
||
|---|---|---|
| .. | ||
| application_helper.rb | ||
| common_helper.rb | ||
| email_helper.rb | ||
| embed_helper.rb | ||
| emoji_helper.rb | ||
| list_helper.rb | ||
| posts_helper.rb | ||
| qunit_helper.rb | ||
| topic_post_bookmarkable_helper.rb | ||
| topics_helper.rb | ||
| user_notifications_helper.rb | ||
