diff --git a/bigbluebutton-html5/imports/api/meetings/server/modifiers/addMeeting.js b/bigbluebutton-html5/imports/api/meetings/server/modifiers/addMeeting.js index cded1233cb582f13181e6f8b0dc7a241e74a2bb5..7a4b4dab7aea4eaf91d1f29d1044886e812845be 100755 --- a/bigbluebutton-html5/imports/api/meetings/server/modifiers/addMeeting.js +++ b/bigbluebutton-html5/imports/api/meetings/server/modifiers/addMeeting.js @@ -107,9 +107,10 @@ export default function addMeeting(meeting) { let { welcomeMsg } = newMeeting.welcomeProp; const sanitizedWelcomeText = SanitizeHTML(welcomeMsg, { - allowedTags: ['b', 'strong', 'i', 'u', 'a', 'br'], + allowedTags: ['b', 'strong', 'i', 'u', 'a', 'br', 'img'], allowedAttributes: { a: ['href', 'name', 'target'], + img: ['src'], }, }); welcomeMsg = sanitizedWelcomeText.replace( @@ -133,9 +134,10 @@ export default function addMeeting(meeting) { const { modOnlyMessage } = newMeeting.welcomeProp; const sanitizedModOnlyText = SanitizeHTML(modOnlyMessage, { - allowedTags: ['b', 'strong', 'i', 'u', 'a', 'br'], + allowedTags: ['b', 'strong', 'i', 'u', 'a', 'br', 'img'], allowedAttributes: { a: ['href', 'name', 'target'], + img: ['src'], }, }); diff --git a/bigbluebutton-html5/imports/ui/components/join-handler/component.jsx b/bigbluebutton-html5/imports/ui/components/join-handler/component.jsx index e7a4444dd84404429ed02d2e49a296397734f0d1..a04ea5d229a65e100dc935ddda0177b7781b7c1a 100755 --- a/bigbluebutton-html5/imports/ui/components/join-handler/component.jsx +++ b/bigbluebutton-html5/imports/ui/components/join-handler/component.jsx @@ -143,9 +143,10 @@ class JoinHandler extends Component { const setModOnlyMessage = (resp) => { if (resp && resp.modOnlyMessage) { const sanitizedModOnlyText = SanitizeHTML(resp.modOnlyMessage, { - allowedTags: ['b', 'strong', 'i', 'u', 'a', 'br'], + allowedTags: ['b', 'strong', 'i', 'u', 'a', 'br', 'img'], allowedAttributes: { a: ['href', 'name', 'target'], + img: ['src'], }, }); setModeratorOnlyMessage(sanitizedModOnlyText);