From 0fa009244e684877954cea4d6034d0321d77929a Mon Sep 17 00:00:00 2001 From: Kevin <66999025+DAQEM@users.noreply.github.com> Date: Wed, 4 Feb 2026 11:35:24 +0100 Subject: [PATCH] fix: preserve allowed iframe query parameters --- packages/utils/parse.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/utils/parse.ts b/packages/utils/parse.ts index 0ec93bdd3f..4011141c8d 100644 --- a/packages/utils/parse.ts +++ b/packages/utils/parse.ts @@ -53,7 +53,7 @@ export const configuredXss = new FilterXSS({ continue } - const newSearchParams = new URLSearchParams() + const newSearchParams = new URLSearchParams(url.searchParams) url.searchParams.forEach((value, key) => { if (!source.allowedParameters.some((param) => param.test(`${key}=${value}`))) { newSearchParams.delete(key)