From 51f29ab52b2238f38986b150c3a6c754a4b65d19 Mon Sep 17 00:00:00 2001
From: undefined <i@undefined.moe>
Date: Fri, 25 Oct 2024 12:17:17 +0800
Subject: [PATCH] ui: disable media autoplay

---
 packages/ui-default/backendlib/markdown-it-xss.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/ui-default/backendlib/markdown-it-xss.ts b/packages/ui-default/backendlib/markdown-it-xss.ts
index c3033a8e4..5f35b6e6b 100644
--- a/packages/ui-default/backendlib/markdown-it-xss.ts
+++ b/packages/ui-default/backendlib/markdown-it-xss.ts
@@ -121,7 +121,7 @@ export const xss = new FilterXSS({
     ...commonRules.whiteList,
     area: ['shape', 'coords', 'href', 'alt'],
     article: [],
-    audio: ['autoplay', 'controls', 'loop', 'preload', 'src'],
+    audio: ['controls', 'loop', 'preload', 'src'],
     col: ['align', 'valign', 'span', 'width'],
     colgroup: ['align', 'valign', 'span', 'width'],
     dd: [],
@@ -146,7 +146,7 @@ export const xss = new FilterXSS({
     thead: ['align', 'valign'],
     tr: ['rowspan', 'align', 'valign'],
     ul: [],
-    video: ['autoplay', 'controls', 'loop', 'preload', 'src', 'height', 'width'],
+    video: ['controls', 'loop', 'preload', 'src', 'height', 'width'],
   },
   css: cssFilterOptions,
   safeAttrValue(tag, name, value) {