Open-Measurement-JSClients icon indicating copy to clipboard operation
Open-Measurement-JSClients copied to clipboard

omid_v1_present iframe missing sandbox attribute

Open bjoberg opened this issue 1 year ago • 3 comments

Overview

The iframe created to detect if omid is present, or not, does not contain a sandbox attribute.

Current output:

<iframe id="omid_v1_present" name="omid_v1_present" style="display: none;">
...
</iframe>

Desired output:

<iframe id="omid_v1_present" name="omid_v1_present" style="display: none;" sandbox>
...
</iframe>

Code reference.

Why is this a problem?

This is a problem because the sandbox attribute "controls the restrictions applied to the content embedded in the

What can be done?

Add sandbox to the iframe.

bjoberg avatar Jun 20 '23 17:06 bjoberg

Yes, I think adding the sandbox attribute should be fine. See #31 for discussion of how it will be merged.

nlehrer avatar Jun 20 '23 18:06 nlehrer

The change in the upstream repo was merged and will be included in v1.4.6 which is being released at the moment (should appear in this repo today or Monday).

nlehrer avatar Jun 23 '23 16:06 nlehrer

Amazing 🙌🏼. Thanks for your support!!

bjoberg avatar Jun 23 '23 16:06 bjoberg