FXL: sandbox the iframes

2026-09-09 11:29:14 -04:00 · 2023-03-30 16:21:28 +08:00
parent 7d721611fa
commit bc1f799c44
1 changed files with 3 additions and 0 deletions
@@ -63,6 +63,9 @@ class Container {
            display: 'none',
            overflow: 'hidden',
        })
+        // `allow-scripts` is needed for events because of WebKit bug
+        // https://bugs.webkit.org/show_bug.cgi?id=218086
+        iframe.setAttribute('sandbox', 'allow-same-origin allow-scripts')
        iframe.setAttribute('scrolling', 'no')
        iframe.classList.add('filter')
        this.#element.append(element)