src-advisory/SRCmail
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: removed allow-same-origin to avoid anti-pattern permissions on iframe sandbox #209

Browse Source
This commit is contained in:
Denis Teyssier
2026-04-20 14:55:50 +02:00
committed by Linus Rath
parent e73ffa7449
commit c3960a99be
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/files/file-preview-modal.tsx
+1 -1
View File
@@ -223,7 +223,7 @@ export function FilePreviewModal({ name, onClose, onDownload, getFileContent }:
{!loading && !error && fileType === "pdf" && objectUrl && ( {!loading && !error && fileType === "pdf" && objectUrl && (
<iframe <iframe
src={objectUrl} src={objectUrl}
sandbox="allow-same-origin allow-scripts" sandbox="allow-scripts"
className="w-full max-w-5xl h-full rounded-lg bg-white" className="w-full max-w-5xl h-full rounded-lg bg-white"
title={name} title={name}
/> />