From 6215f926c919242fe30f16a74a8fb9dec89a249e Mon Sep 17 00:00:00 2001
From: Sarah Rose Ferris <sarahrose.ferris@whereby.com>
Date: Mon, 23 Oct 2023 15:20:36 +0100
Subject: [PATCH 1/2] Add sandbox attritube to iframe to allow downloads with
 new privacy sandbox settings

---
 src/lib/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/index.js b/src/lib/index.js
index 3225c1c1..9315cbb9 100644
--- a/src/lib/index.js
+++ b/src/lib/index.js
@@ -153,7 +153,7 @@ define("WherebyEmbed", {
       <iframe
         ref=${this.iframe}
         src=${this.roomUrl}
-        allow="autoplay; camera; microphone; fullscreen; speaker; display-capture" />
+        allow="autoplay; camera; microphone; fullscreen; display-capture" sandbox="allow-downloads allow-same-origin allow-forms allow-scripts" />
       `;
     },
 });

From a3b36b3d77ca2f6de1fd928ee86f9858a0b3cc44 Mon Sep 17 00:00:00 2001
From: Sarah Rose Ferris <sarahrose.ferris@whereby.com>
Date: Wed, 25 Oct 2023 16:46:21 +0100
Subject: [PATCH 2/2] Apply sandbox to only those using the local-recording
 param or attribute

---
 src/lib/index.js | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/lib/index.js b/src/lib/index.js
index 9315cbb9..507c28ef 100644
--- a/src/lib/index.js
+++ b/src/lib/index.js
@@ -149,11 +149,18 @@ define("WherebyEmbed", {
                 this.roomUrl.searchParams.set(k, v);
             }
         });
+
+        const isLocalRecordingEnabled = this.roomUrl.searchParams.has("recording");
+
+        if (isLocalRecordingEnabled)
+            this.iframe.sandbox = "allow-downloads allow-same-origin allow-forms allow-scripts allow-popups";
+
         this.html`
       <iframe
         ref=${this.iframe}
         src=${this.roomUrl}
-        allow="autoplay; camera; microphone; fullscreen; display-capture" sandbox="allow-downloads allow-same-origin allow-forms allow-scripts" />
+        allow="autoplay; camera; microphone; fullscreen; display-capture"
+        />
       `;
     },
 });