Update write-js.php (#1400)

Add 'allow-same-origin' into sandbox's attrs to fix that the article preview page does not match the real page.
typecho · Apr 15, 2022 · 9fd0252 · 9fd0252
1 parent 3512fd4
commit 9fd0252
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/admin/write-js.php b/admin/write-js.php
@@ -281,7 +281,7 @@ function previewData(cid) {
 
         var frame = $('<iframe frameborder="0" class="preview-frame preview-loading"></iframe>')
             .attr('src', './preview.php?cid=' + cid)
-            .attr('sandbox', 'allow-scripts')
+            .attr('sandbox', 'allow-same-origin allow-scripts')
             .appendTo(document.body);
 
         frame.load(function () {