From c458235dd128398373fb07487ead70bad79661a9 Mon Sep 17 00:00:00 2001
From: Anirudh Oppiliappan <x@icyphox.sh>
Date: Tue, 20 May 2025 08:29:20 +0000
Subject: [PATCH] appview: pages/markup: add support for video

---
 appview/pages/markup/markdown.go | 11 +++++++++--
 camo/src/mimetypes.json | 3 ++-
 2 file(s) changed, 11 insertion(s)(+), 3 deletion(s)(-)

diff --git a/appview/pages/markup/markdown.go b/appview/pages/markup/markdown.go
--- a/appview/pages/markup/markdown.go
+++ b/appview/pages/markup/markdown.go
@@ -122,7 +122,7 @@
 func visitNode(ctx *RenderContext, node *htmlparse.Node) {
 	switch node.Type {
 	case htmlparse.ElementNode:
-		if node.Data == "img" {
+		if node.Data == "img" || node.Data == "source" {
 			for i, attr := range node.Attr {
 				if attr.Key != "src" {
 					continue
@@ -142,7 +142,14 @@ }
 
 func (rctx *RenderContext) Sanitize(html string) string {
 	policy := bluemonday.UGCPolicy()
-	policy.AllowAttrs("align", "style").Globally()
+
+	// video
+	policy.AllowElements("video")
+	policy.AllowAttrs("controls").OnElements("video")
+	policy.AllowElements("source")
+	policy.AllowAttrs("src", "type").OnElements("source")
+
+	policy.AllowAttrs("align", "style", "width", "height").Globally()
 	policy.AllowStyles(
 		"margin",
 		"padding",
diff --git a/camo/src/mimetypes.json b/camo/src/mimetypes.json
--- a/camo/src/mimetypes.json
+++ b/camo/src/mimetypes.json
@@ -41,5 +41,6 @@ "image/x-quicktime",
   "image/x-rgb",
   "image/x-xbitmap",
   "image/x-xpixmap",
-  "image/x-xwindowdump"
+  "image/x-xwindowdump",
+  "video/mp4"
 ]

--
tangled.sh