sanitize-html v1.17.0 Release Notes
-
🔧 The new
allowedIframeHostnames
option. If present, this must be an array, and only iframesrc
URLs hostnames (complete hostnames; domain name matches are not enough) that appear on this list are allowed. You must also configurehostname
as an allowed attribute foriframe
. Thanks to Ryan Verys for this contribution.