diff options
author | Jeremy Apthorp <nornagon@nornagon.net> | 2019-03-26 18:26:56 -0700 |
---|---|---|
committer | fguillot <fred@miniflux.net> | 2019-03-26 18:26:56 -0700 |
commit | 304b43cb308f326e2a5a5cda6fa886906b6c4f83 (patch) | |
tree | 3fb8b9fb9702eaa65f004ff56251c62313bf32a8 /reader/sanitizer/sanitizer.go | |
parent | 3a483be25876faa8e4c6a15c9c6b2949b96e1bc9 (diff) |
Add 'allow-popups' to iframe sandbox permissions
Diffstat (limited to 'reader/sanitizer/sanitizer.go')
-rw-r--r-- | reader/sanitizer/sanitizer.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/reader/sanitizer/sanitizer.go b/reader/sanitizer/sanitizer.go index eae9b21..1065e5b 100644 --- a/reader/sanitizer/sanitizer.go +++ b/reader/sanitizer/sanitizer.go @@ -137,7 +137,7 @@ func getExtraAttributes(tagName string) ([]string, []string) { case "video", "audio": return []string{"controls"}, []string{"controls"} case "iframe": - return []string{"sandbox"}, []string{`sandbox="allow-scripts allow-same-origin"`} + return []string{"sandbox"}, []string{`sandbox="allow-scripts allow-same-origin allow-popups"`} default: return nil, nil } |