Use iframe sandbox for rendering HTML in transformation

Signed-off-by: Michal Čihař <michal@cihar.com>

1 files changed, 4 insertions, 2 deletions

diff --git a/libraries/plugins/transformations/abstract/FormattedTransformationsPlugin.class.php b/libraries/plugins/transformations/abstract/FormattedTransformationsPlugin.class.php
index e6bb8d9ba9..2774167730 100644
--- a/libraries/plugins/transformations/abstract/FormattedTransformationsPlugin.class.php
+++ b/libraries/plugins/transformations/abstract/FormattedTransformationsPlugin.class.php
@@ -45,7 +45,9 @@ abstract class FormattedTransformationsPlugin extends TransformationsPlugin
      */
     public function applyTransformation($buffer, $options = array(), $meta = '')
     {
-        return $buffer;
+        return '<iframe srcdoc="'
+            . strtr($buffer, '"', '\'')
+            . '" sandbox=""></iframe>';
     }
 
     /**
@@ -77,4 +79,4 @@ abstract class FormattedTransformationsPlugin extends TransformationsPlugin
         return "Formatted";
     }
 }
-?>
\ No newline at end of file
+?>