Commit 3aab105d authored by Oleg Korshul's avatar Oleg Korshul Committed by Alexander.Trofimov

запрещено исполнение скриптов в iframe для вставки

parent fc182a5e
......@@ -578,6 +578,7 @@ CClipboardBase.prototype =
ifr.style.height = '100px';
ifr.style.overflow = 'hidden';
ifr.style.zIndex = -1000;
ifr.setAttribute("sandbox", "");
document.body.appendChild(ifr);
this.CommonIframe = ifr;
......
......@@ -2374,6 +2374,7 @@ function Body_Paste(api, e)
ifr.style.height = '100px';
ifr.style.overflow = 'hidden';
ifr.style.zIndex = -1000;
ifr.setAttribute("sandbox", "");
document.body.appendChild(ifr);
}
else
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment