在ueditor文件夹下找到ueditor.config.js xss过滤白名单加入以内容即可
embed: [‘type‘, ‘class‘, ‘pluginspage‘, ‘src‘,‘width‘, ‘height‘, ‘align‘, ‘style‘, ‘wmode‘, ‘play‘,‘autoplay‘,‘loop‘, ‘menu‘, ‘allowscriptaccess‘, ‘allowfullscreen‘, ‘controls‘, ‘preload‘], iframe: [‘src‘, ‘class‘, ‘height‘, ‘width‘, ‘max-width‘, ‘max-height‘, ‘align‘, ‘frameborder‘, ‘allowfullscreen‘]
原文：https://www.cnblogs.com/fogwang/p/11442787.html