mirror/mastodon
1
0
Fork 0
mirror of https://github.com/mastodon/mastodon synced 2024-11-27 06:18:17 +09:00
Code

Fix missing permission on new embeds making them unclickable (#32135)

Browse Source
This commit is contained in:
Eugen Rochko 2024-09-30 10:20:20 +02:00 committed by GitHub
parent 9d664f87a0
commit c352ce6f45
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
public/embed.js
View File

@ -81,7 +81,7 @@ const allowedPrefixes = (document.currentScript && document.currentScript.tagNam
embeds.set(id, iframe); embeds.set(id, iframe);
iframe.allow = 'fullscreen'; iframe.allow = 'fullscreen';
iframe.sandbox = 'allow-scripts allow-same-origin'; iframe.sandbox = 'allow-scripts allow-same-origin allow-popups';
iframe.style.border = 0; iframe.style.border = 0;
iframe.style.overflow = 'hidden'; iframe.style.overflow = 'hidden';
iframe.style.display = 'block'; iframe.style.display = 'block';
@ -112,7 +112,7 @@ const allowedPrefixes = (document.currentScript && document.currentScript.tagNam
iframe.width = container.clientWidth; iframe.width = container.clientWidth;
iframe.height = 0; iframe.height = 0;
iframe.allow = 'fullscreen'; iframe.allow = 'fullscreen';
iframe.sandbox = 'allow-scripts allow-same-origin'; iframe.sandbox = 'allow-scripts allow-same-origin allow-popups';
iframe.style.border = 0; iframe.style.border = 0;
iframe.style.overflow = 'hidden'; iframe.style.overflow = 'hidden';
iframe.style.display = 'block'; iframe.style.display = 'block';