Sanitize and sandbox toot embeds (#9552)

2026-08-14 20:07:01 -05:00 · 2018-12-23 02:16:35 +01:00
parent bb62827c16
commit e25947db4a
2 changed files with 2 additions and 0 deletions
--- a/app/javascript/mastodon/features/ui/components/embed_modal.js
+++ b/app/javascript/mastodon/features/ui/components/embed_modal.js
@@ -77,6 +77,7 @@ class EmbedModal extends ImmutablePureComponent {
            className='embed-modal__iframe'
            frameBorder='0'
            ref={this.setIframeRef}
+            sandbox='allow-same-origin'
            title='preview'
          />
        </div>