fix: removed allow-same-origin to avoid anti-pattern permissions on iframe sandbox #209

2026-04-20 14:55:50 +02:00
parent e73ffa7449
commit c3960a99be
1 changed files with 1 additions and 1 deletions
@@ -223,7 +223,7 @@ export function FilePreviewModal({ name, onClose, onDownload, getFileContent }:
        {!loading && !error && fileType === "pdf" && objectUrl && (
          <iframe
            src={objectUrl}
-            sandbox="allow-same-origin allow-scripts"
+            sandbox="allow-scripts"
            className="w-full max-w-5xl h-full rounded-lg bg-white"
            title={name}
          />