f.weber/homebrewery
0
0
Fork 0
mirror of https://github.com/naturalcrit/homebrewery.git synced 2026-08-06 06:47:38 +00:00
Code Wiki Activity

Add a sandbox property to the renderer iframe to prevent any script execution

Browse Source 
But still allow for print (via allow-modals), same-origin downloads, and top navigation (so that links work).
This commit is contained in:
ReinaSweet
2026-07-18 03:02:41 -07:00
parent 2eb246ab0d
commit 5fa7b95e19
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/homebrew/brewRenderer/brewRenderer.jsx
+1
View File
@@ -352,6 +352,7 @@ const BrewRenderer = (props)=>{
style={{ width: '100%', height: '100%', visibility: state.visibility }} style={{ width: '100%', height: '100%', visibility: state.visibility }}
contentDidMount={frameDidMount} contentDidMount={frameDidMount}
onClick={()=>{emitClick();}} onClick={()=>{emitClick();}}
sandbox="allow-same-origin allow-modals allow-top-navigation"
> >
<div className='brewRenderer' <div className='brewRenderer'
onKeyDown={handleControlKeys} onKeyDown={handleControlKeys}