Disable rendering widgets on federated pages (security)

silverbulletmd · Feb 8, 2025 · 8f29cef · 8f29cef
1 parent 38dc5bb
commit 8f29cef
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/web/cm_plugins/util.ts b/web/cm_plugins/util.ts
@@ -179,5 +179,6 @@ export const invisibleDecoration = Decoration.replace({});
 export function shouldRenderWidgets(client: Client) {
   const currentPageMeta = client.ui.viewState.currentPageMeta;
   return !currentPageMeta?.tags?.includes("template") &&
-    currentPageMeta?.pageDecoration?.renderWidgets !== false;
+    currentPageMeta?.pageDecoration?.renderWidgets !== false &&
+    !currentPageMeta?.name.startsWith("!");
 }