From f4e40a9dcd4ac5e5aef87cb616151eb839026e1f Mon Sep 17 00:00:00 2001 From: Chris Troutner Date: Fri, 18 Sep 2026 08:52:19 -0700 Subject: [PATCH] Fixing errors in client --- psf-memo-client/src/components/post-feed/post-content.js | 2 +- psf-memo-client/src/components/post-feed/post-feed-item.js | 4 ++-- psf-memo-client/test/unit/post-content.test.js | 6 ++++++ 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/psf-memo-client/src/components/post-feed/post-content.js b/psf-memo-client/src/components/post-feed/post-content.js index 89b9c72..50d3ad4 100644 --- a/psf-memo-client/src/components/post-feed/post-content.js +++ b/psf-memo-client/src/components/post-feed/post-content.js @@ -71,7 +71,7 @@ function PostContent ({ text = '', initialFailedImages }) { React.createElement('iframe', { src: `${YOUTUBE_EMBED_BASE_URL}/${segment.videoId}`, title: `YouTube video ${segment.videoId}`, - allow: 'accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share', + allow: 'accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture', referrerPolicy: 'strict-origin-when-cross-origin', allowFullScreen: true, frameBorder: '0' diff --git a/psf-memo-client/src/components/post-feed/post-feed-item.js b/psf-memo-client/src/components/post-feed/post-feed-item.js index 76e1559..5aa174b 100644 --- a/psf-memo-client/src/components/post-feed/post-feed-item.js +++ b/psf-memo-client/src/components/post-feed/post-feed-item.js @@ -137,7 +137,7 @@ function PostFeedItem ({
-

+

-

+
{(showReplyCount || showLikeButton) && ( diff --git a/psf-memo-client/test/unit/post-content.test.js b/psf-memo-client/test/unit/post-content.test.js index 0b9ea7b..91f0095 100644 --- a/psf-memo-client/test/unit/post-content.test.js +++ b/psf-memo-client/test/unit/post-content.test.js @@ -49,6 +49,12 @@ test('renders an embedded YouTube player and a separate link together', () => { assert.doesNotMatch(html, /]+href="https:\/\/youtu\.be\/dQw4w9WgXcQ"/) }) +test('YouTube iframe allow list omits unrecognized web-share', () => { + const html = render('https://youtu.be/dQw4w9WgXcQ') + assert.match(html, /]+allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"/) + assert.doesNotMatch(html, /web-share/) +}) + test('renders an image URL as an inline image inside a new-tab anchor', () => { const html = render('https://i.imgur.com/swCI56T.jpeg Anong breed ng basil ito?') assert.match(html, /]+href="https:\/\/i\.imgur\.com\/swCI56T\.jpeg"[^>]*>[\s\S]*