Fix missing permission on new embeds making them unclickable (#32135)

3 months ago · c352ce6f45
parent 9d664f87a0
commit c352ce6f45
1 changed files with 2 additions and 2 deletions
--- a/public/embed.js
+++ b/public/embed.js
@ -81,7 +81,7 @@ const allowedPrefixes = (document.currentScript && document.currentScript.tagNam
      embeds.set(id, iframe);

      iframe.allow = 'fullscreen';
-      iframe.sandbox = 'allow-scripts allow-same-origin';
+      iframe.sandbox = 'allow-scripts allow-same-origin allow-popups';
      iframe.style.border = 0;
      iframe.style.overflow = 'hidden';
      iframe.style.display = 'block';
@ -112,7 +112,7 @@ const allowedPrefixes = (document.currentScript && document.currentScript.tagNam
      iframe.width = container.clientWidth;
      iframe.height = 0;
      iframe.allow = 'fullscreen';
-      iframe.sandbox = 'allow-scripts allow-same-origin';
+      iframe.sandbox = 'allow-scripts allow-same-origin allow-popups';
      iframe.style.border = 0;
      iframe.style.overflow = 'hidden';
      iframe.style.display = 'block';