From 68e55b532239ead1303c3e25b292bfca30c677c6 Mon Sep 17 00:00:00 2001
From: Vicent Alfonso <81161239+V100X@users.noreply.github.com>
Date: Tue, 1 Oct 2024 22:01:49 +0200
Subject: [PATCH] SAK-50555 Kernel antisamy whitelist SharePoint URLs (#12938)

---
 .../src/main/resources/antisamy/high-security-policy.xml        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kernel/kernel-impl/src/main/resources/antisamy/high-security-policy.xml b/kernel/kernel-impl/src/main/resources/antisamy/high-security-policy.xml
index 9ca152fe6b4e..a017e88ec55f 100644
--- a/kernel/kernel-impl/src/main/resources/antisamy/high-security-policy.xml
+++ b/kernel/kernel-impl/src/main/resources/antisamy/high-security-policy.xml
@@ -122,7 +122,7 @@
         Add in your site (e.g. "new.site.host.com/path": with escaped ".": "new\.site\.host\.com/path|"
         Like shown here: (new\.site\.host\.com/path|download\.macromedia\.com/pub|
     -->
-    <regexp name="flashSites" value="(((https?:)?//(download\.macromedia\.com/pub|www\.macromedia\.com/(go|shockwave)|c\.brightcove\.com/services|gamevideos\.1up\.com/swf|(www\.)?youtube(\-nocookie)?\.com/(v|embed)|(www\.)?youtu\.be|(www\.|player\.)?vimeo\.com|w\.soundcloud\.com|www\.gametrailers\.com|videomedia\.ign\.com/ev|image\.com\.com/gamespot|www\.hulu\.com/embed|embed\.break\.com|player\.ordienetworks\.com/flash|www\.adultswim\.com/video/vplayer|www\.dailymotion\.com/swf|www\.ustream\.tv/flash/video|cdn-i\.dmdentertainment\.com|media\.mtvnservices\.com|www\.justin\.tv/widgets|www\.viddler\.com/(player|simple_on_site)|static\.twitter\.com/flash|www\.gamepro\.com/bin|cdn\.knightlab\.com|player\.pbs\.org|player\.history\.com|(.*)\.sharestream\.(com|net)|(.*)\.kaltura\.(com|net)|www\.divshare\.com/flash|www\.facebook\.com/v|(.*)\.jove\.com|(.*)\.linkedin\.com|(.*)\.microsoftstream\.com|(.*)\.h5p\.com|h5p\.org)/.*)|(/library/(?!.*\.\.[/|\\]).*)/.+)" />
+    <regexp name="flashSites" value="(((https?:)?//(download\.macromedia\.com/pub|www\.macromedia\.com/(go|shockwave)|c\.brightcove\.com/services|gamevideos\.1up\.com/swf|(www\.)?youtube(\-nocookie)?\.com/(v|embed)|(www\.)?youtu\.be|(www\.|player\.)?vimeo\.com|w\.soundcloud\.com|www\.gametrailers\.com|videomedia\.ign\.com/ev|image\.com\.com/gamespot|www\.hulu\.com/embed|embed\.break\.com|player\.ordienetworks\.com/flash|www\.adultswim\.com/video/vplayer|www\.dailymotion\.com/swf|www\.ustream\.tv/flash/video|cdn-i\.dmdentertainment\.com|media\.mtvnservices\.com|www\.justin\.tv/widgets|www\.viddler\.com/(player|simple_on_site)|static\.twitter\.com/flash|www\.gamepro\.com/bin|cdn\.knightlab\.com|player\.pbs\.org|player\.history\.com|(.*)\.sharestream\.(com|net)|(.*)\.kaltura\.(com|net)|www\.divshare\.com/flash|www\.facebook\.com/v|(.*)\.jove\.com|(.*)\.linkedin\.com|(.*)\.microsoftstream\.com|(.*)\.sharepoint\.com|(.*)\.h5p\.com|h5p\.org)/.*)|(/library/(?!.*\.\.[/|\\]).*)/.+)" />
 
     <!-- This is a basic alphanumeric and punctuation string -->
     <regexp name="basicAlphaNumeric" value="^[a-zA-Z0-9\s\-_.\?!,]*$" />