receiver: put the content into a sandboxed iframe

vincentbernat · Apr 20, 2015 · 5ce516c · 5ce516c
1 parent 949f32a
commit 5ce516c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/scripts/receiver/iframe-queue.js b/app/scripts/receiver/iframe-queue.js
@@ -30,6 +30,7 @@ define('iframe-queue', (function(window, $, undefined) {
     vp.adapt(this.el);
 
     // Load the URL
+    this.el.attr('sandbox', 'allow-scripts');
     this.el.attr('src', dashboard.url);
   }