chore(share): use same sandbox features for iframe

eliandoran · eliandoran · commit 99fd088ff5dd · 2025-10-31T10:12:56.000+02:00
diff --git a/apps/server/src/share/content_renderer.ts b/apps/server/src/share/content_renderer.ts
@@ -421,7 +421,7 @@ function renderWebView(note: SNote | BNote, result: Result) {
     const url = note.getLabelValue("webViewSrc");
     if (!url) return;
 
-    result.content = `<iframe class="webview" src="${sanitizeUrl(url)}"></iframe>`;
+    result.content = `<iframe class="webview" src="${sanitizeUrl(url)}" sandbox="allow-same-origin allow-scripts allow-popups"></iframe>`;
 }
 
 export default {

Original file line number	Diff line number	Diff line change
`@@ -421,7 +421,7 @@ function renderWebView(note: SNote \| BNote, result: Result) {`
`421`	`421`	`const url = note.getLabelValue("webViewSrc");`
`422`	`422`	`if (!url) return;`
`423`	`423`
`424`		- result.content = `<iframe class="webview" src="${sanitizeUrl(url)}"></iframe>`;
	`424`	+ result.content = `<iframe class="webview" src="${sanitizeUrl(url)}" sandbox="allow-same-origin allow-scripts allow-popups"></iframe>`;
`425`	`425`	`}`
`426`	`426`
`427`	`427`	`export default {`