From c3960a99be09526dfed630487c1b94e9a1ebff56 Mon Sep 17 00:00:00 2001
From: Denis Teyssier <admin@mascali.ovh>
Date: Mon, 20 Apr 2026 14:53:31 +0200
Subject: [PATCH] fix: removed allow-same-origin to avoid anti-pattern
 permissions on iframe sandbox #209

---
 components/files/file-preview-modal.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/components/files/file-preview-modal.tsx b/components/files/file-preview-modal.tsx
index 0dc1dcae..d751e0a2 100644
--- a/components/files/file-preview-modal.tsx
+++ b/components/files/file-preview-modal.tsx
@@ -223,7 +223,7 @@ export function FilePreviewModal({ name, onClose, onDownload, getFileContent }:
         {!loading && !error && fileType === "pdf" && objectUrl && (
           <iframe
             src={objectUrl}
-            sandbox="allow-same-origin allow-scripts"
+            sandbox="allow-scripts"
             className="w-full max-w-5xl h-full rounded-lg bg-white"
             title={name}
           />