Cap embed iframe height at 10000px

This commit is contained in:
Zed 2026-08-10 22:51:17 +07:00
commit b76e3c3913

View file

@ -105,7 +105,7 @@
function handleResize(e) { function handleResize(e) {
if (!Array.isArray(e.data) || e.data[0] !== "resizeIframe") return; if (!Array.isArray(e.data) || e.data[0] !== "resizeIframe") return;
var h = e.data[1] && e.data[1].h; var h = e.data[1] && e.data[1].h;
if (!h || h <= 0) return; if (!h || h <= 0 || h > 10000) return; // Cap at 10000px for sanity
var frames = document.querySelectorAll("iframe.nitter-embed-frame"); var frames = document.querySelectorAll("iframe.nitter-embed-frame");
for (var i = 0; i < frames.length; i++) { for (var i = 0; i < frames.length; i++) {