fix:Add options to iFrame

abecms · Dec 16, 2016 · 3b238c8 · 3b238c8
1 parent 0d6a6a2
commit 3b238c8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/server/public/abejs/scripts/modules/EditorReload.js b/src/server/public/abejs/scripts/modules/EditorReload.js
@@ -63,7 +63,7 @@ export default class Reload {
 
     iframe.id = 'page-template'
     iframe.src = 'about:blank'
-    iframe.sandbox = 'allow-same-origin allow-scripts allow-popups allow-forms'
+    iframe.sandbox = 'allow-presentation allow-modals allow-pointer-lock allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms allow-top-navigation'
     iframe.setAttribute('data-iframe-src', document.querySelector('#page-template').getAttribute('data-iframe-src'))
 
     var initIframe = function () {

diff --git a/src/server/views/partials/page.html b/src/server/views/partials/page.html
@@ -2,7 +2,7 @@
 <div class="no-gutter half-view iframe-wrapper reloading">
   {{#if isHome}}
   {{else}}
-  <iframe id="page-template" data-iframe-src="/abe/page/{{@root.json.abe_meta.link}}" src="about:blank" sandbox="allow-same-origin allow-scripts allow-popups allow-forms"></iframe>
+  <iframe id="page-template" data-iframe-src="/abe/page/{{@root.json.abe_meta.link}}" src="about:blank" sandbox="allow-presentation allow-modals allow-pointer-lock allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms allow-top-navigation"></iframe>
   {{/if}}
   <div class="browser-size"></div>
   <div class="ruler-over"></div>