Allow 'sandbox' attribute for html::iframe

1 year ago · fc6f9ca43b
1 changed files with 1 additions and 1 deletions
--- a/program/lib/Roundcube/html.php
+++ b/program/lib/Roundcube/html.php
@ -243,7 +243,7 @@ class html
            $attr = ['src' => $attr];
        }

-        $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen'];
+        $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen', 'sandbox'];

        return self::tag('iframe', $attr, $cont, array_merge(self::$common_attrib, $allowed));
    }