fix: apply sandbox attribute to OnlyOffice/Collabora iframe

owncloud · Apr 4, 2024 · 4b1bd10 · 4b1bd10
1 parent 00024d4
commit 4b1bd10
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/packages/web-app-external/src/App.vue b/packages/web-app-external/src/App.vue
@@ -5,6 +5,7 @@
     class="oc-width-1-1 oc-height-1-1"
     :title="iFrameTitle"
     allowfullscreen
+    sandbox="allow-scripts allow-same-origin"
   />
   <div v-if="appUrl && method === 'POST' && formParameters" class="oc-height-1-1 oc-width-1-1">
     <form :action="appUrl" target="app-iframe" method="post">
@@ -18,6 +19,7 @@
       class="oc-width-1-1 oc-height-1-1"
       :title="iFrameTitle"
       allowfullscreen
+      sandbox="allow-scripts allow-same-origin"
     />
   </div>
 </template>