From 10d8e4332cc4a797666eb027a78abffb3e06226b Mon Sep 17 00:00:00 2001
From: yflory <yann.flory@xwiki.com>
Date: Thu, 30 Apr 2026 16:21:21 +0200
Subject: [PATCH] fix(realtime): fix realtime conflicts by cleaning attributes
 earlier

---
 www/common/media-tag.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/www/common/media-tag.js b/www/common/media-tag.js
index a50c22267..99eaa3307 100644
--- a/www/common/media-tag.js
+++ b/www/common/media-tag.js
@@ -575,6 +575,10 @@ var factory = function (Util) {
         Object.keys(origin.attributes).forEach(function (i) {
             if (!/^data-attr/.test(origin.attributes[i].name)) { return; }
             var name = origin.attributes[i].name.slice(10);
+            // Ignore attributes filtered out by the sanitizer
+            if (name === "src") { return; }
+            if (name === "srcdoc") { return; }
+            if (/^on/i.test(name)) { return; }
             var value = origin.attributes[i].value;
             dest.setAttribute(name, value);
         });