From 44ef8258ff5ceb1d6062a052a3f76b41831d41fc Mon Sep 17 00:00:00 2001
From: simeng-li <simeng@silverhand.io>
Date: Mon, 20 Mar 2023 14:46:42 +0800
Subject: [PATCH] chore(ui): disallow js in terms iframe (#3524)

---
 .../ui/src/Providers/IframeModalProvider/IframeModal/index.tsx | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/ui/src/Providers/IframeModalProvider/IframeModal/index.tsx b/packages/ui/src/Providers/IframeModalProvider/IframeModal/index.tsx
index f7ce27988..5754277a5 100644
--- a/packages/ui/src/Providers/IframeModalProvider/IframeModal/index.tsx
+++ b/packages/ui/src/Providers/IframeModalProvider/IframeModal/index.tsx
@@ -52,7 +52,8 @@ const IframeModal = ({ className, title = '', href = '', onClose }: ModalProps)
           <iframe
             title={title}
             src={href}
-            sandbox="allow-scripts"
+            // Applies all restrictions
+            sandbox=""
             className={conditional(isLoaded && styles.loaded)}
             onLoad={() => {
               setIsLoaded(true);