Add allow-forms on iframe sandbox (#259)

tjek · Oct 24, 2024 · 63379ab · 63379ab
1 parent 1645212
commit 63379ab
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/incito-browser/incito.ts b/lib/incito-browser/incito.ts
@@ -329,7 +329,7 @@ function renderView(view, canLazyload: boolean) {
             tagName = 'iframe';
             classNames.push('incito__html-embed-view');
 
-            attrs.sandbox = 'allow-scripts allow-same-origin';
+            attrs.sandbox = 'allow-scripts allow-same-origin allow-forms';
             attrs.allowfullscreen = '';
 
             const src = String(new URL(view.src));

diff --git a/lib/kits/paged-publication/hotspots.ts b/lib/kits/paged-publication/hotspots.ts
@@ -77,7 +77,7 @@ function renderHotspot(hotspot, position, contentRect, boundingRect) {
                     title="sgn-pagedecoration-embed-${hotspot.id}"
                     height="100%"
                     width="100%"
-                    sandbox="allow-scripts allow-same-origin"
+                    sandbox="allow-scripts allow-same-origin allow-forms"
                     style="border:0;"
                 ></iframe>
             `;