Infrastructure/logto
0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2025-01-27 21:39:16 -05:00
Code Issues Activity

chore(ui): disallow js in terms iframe (#3524)

Browse source
This commit is contained in:
simeng-li 2023-03-20 14:46:42 +08:00 • committed by GitHub
parent a688b242ea
commit 44ef8258ff
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
packages/ui/src/Providers/IframeModalProvider/IframeModal/index.tsx
View file

@ -52,7 +52,8 @@ const IframeModal = ({ className, title = '', href = '', onClose }: ModalProps)
<iframe <iframe
title={title} title={title}
src={href} src={href}
sandbox="allow-scripts" // Applies all restrictions
sandbox=""
className={conditional(isLoaded && styles.loaded)} className={conditional(isLoaded && styles.loaded)}
onLoad={() => { onLoad={() => {
setIsLoaded(true); setIsLoaded(true);