Skip to content

S
sdkjs
Commit 3aab105d authored by Oleg Korshul's avatar Oleg Korshul Committed by Alexander.Trofimov
Browse files
Options

запрещено исполнение скриптов в iframe для вставки

parent fc182a5e
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 0 deletions
common/clipboard_base.js
View file @ 3aab105d
...@@ -578,6 +578,7 @@ CClipboardBase.prototype = ...@@ -578,6 +578,7 @@ CClipboardBase.prototype =
ifr.style.height = '100px'; ifr.style.height = '100px';
ifr.style.overflow = 'hidden'; ifr.style.overflow = 'hidden';
ifr.style.zIndex = -1000; ifr.style.zIndex = -1000;
ifr.setAttribute("sandbox", "");
document.body.appendChild(ifr); document.body.appendChild(ifr);
this.CommonIframe = ifr; this.CommonIframe = ifr;
......
common/wordcopypaste.js
View file @ 3aab105d
...@@ -2374,6 +2374,7 @@ function Body_Paste(api, e) ...@@ -2374,6 +2374,7 @@ function Body_Paste(api, e)
ifr.style.height = '100px'; ifr.style.height = '100px';
ifr.style.overflow = 'hidden'; ifr.style.overflow = 'hidden';
ifr.style.zIndex = -1000; ifr.style.zIndex = -1000;
ifr.setAttribute("sandbox", "");
document.body.appendChild(ifr); document.body.appendChild(ifr);
} }
else else
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7