chore(share): use same sandbox features for iframe

This commit is contained in:
Elian Doran 2025-10-31 10:12:56 +02:00
parent 945f29c759
commit 99fd088ff5
No known key found for this signature in database

View File

@ -421,7 +421,7 @@ function renderWebView(note: SNote | BNote, result: Result) {
const url = note.getLabelValue("webViewSrc"); const url = note.getLabelValue("webViewSrc");
if (!url) return; if (!url) return;
result.content = `<iframe class="webview" src="${sanitizeUrl(url)}"></iframe>`; result.content = `<iframe class="webview" src="${sanitizeUrl(url)}" sandbox="allow-same-origin allow-scripts allow-popups"></iframe>`;
} }
export default { export default {