Declined
Last Updated: 26 Apr 2022 04:55 by ADMIN

Hi,

We are using the Blazor Editor for a feature in one of our web apps, and created a custom tool for the editor that allows the user to modify the raw HTML.

If an IFrame is added to the HTML with an empty or missing "src" attribute like so:

<iframe src=""></iframe>

OR

<iframe></iframe>

The editor will throw a JS Interop exception:

No value supplied for attribute src
      OP@https://[redacted]/_content/Telerik.UI.for.Blazor/js/telerik-blazor.js:6:830821
      PP.prototype.computeAttrs

Would you guys consider this a bug with the editor? Since they are technically valid elements, mganss' HtmlSanitizer does not remove sourceless IFrames and unfortunately there does not seem to be a way to make it do so.

Thanks in advance for the assistance!