0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2025-01-20 21:32:31 -05:00

chore(ui): disallow js in terms iframe (#3524)

This commit is contained in:
simeng-li 2023-03-20 14:46:42 +08:00 committed by GitHub
parent a688b242ea
commit 44ef8258ff
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -52,7 +52,8 @@ const IframeModal = ({ className, title = '', href = '', onClose }: ModalProps)
<iframe
title={title}
src={href}
sandbox="allow-scripts"
// Applies all restrictions
sandbox=""
className={conditional(isLoaded && styles.loaded)}
onLoad={() => {
setIsLoaded(true);