Fixed CVE-2024-29881 for TinyMCE

MahoCommerce · Aug 19, 2024 · 4868c7f · 4868c7f
1 parent 1e3ac3d
commit 4868c7f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pub/js/mage/adminhtml/wysiwyg/tinymce/setup.js b/pub/js/mage/adminhtml/wysiwyg/tinymce/setup.js
@@ -91,6 +91,7 @@ tinyMceWysiwygSetup.prototype =
             branding: false,
             promotion: false,
             convert_urls: false,
+            convert_unsafe_embeds: true,
             relative_urls: true,
             skin: this.config.skin,
             min_height: 460,