feat: add iframe sandbox

live-codes · Jan 19, 2021 · 217d7ee · 217d7ee
1 parent 41b85b6
commit 217d7ee
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/src/localpen/app.ts b/src/localpen/app.ts
@@ -97,6 +97,17 @@ export const app = async (config: Pen) => {
   function createIframe(container: string, template = resultTemplate) {
     return new Promise((resolve) => {
       const iframe = document.createElement('iframe');
+      iframe.setAttribute(
+        'allow',
+        'accelerometer; camera; encrypted-media; geolocation; gyroscope; microphone; midi',
+      );
+      iframe.setAttribute('allowfullscreen', 'true');
+      iframe.setAttribute('allowtransparency', 'true');
+      iframe.setAttribute(
+        'sandbox',
+        'allow-downloads allow-forms allow-modals allow-pointer-lock allow-presentation allow-same-origin allow-scripts',
+      );
+
       const containerEl = document.querySelector(container);
       if (!containerEl) return;
       containerEl.innerHTML = '';