From 77540346413259e4ec62ee8302e503bcd2a01047 Mon Sep 17 00:00:00 2001
From: Rigel Kent <sendmemail@rigelk.eu>
Date: Sun, 10 Jun 2018 18:20:19 +0200
Subject: (embed) sandbox the iframe

---
 client/src/assets/player/utils.ts | 1 +
 1 file changed, 1 insertion(+)

(limited to 'client/src/assets/player')

diff --git a/client/src/assets/player/utils.ts b/client/src/assets/player/utils.ts
index b7cd40aa2..18a6b4dfa 100644
--- a/client/src/assets/player/utils.ts
+++ b/client/src/assets/player/utils.ts
@@ -92,6 +92,7 @@ function buildVideoLink (time?: number) {
 
 function buildVideoEmbed (embedUrl: string) {
   return '<iframe width="560" height="315" ' +
+    'sandbox="allow-same-origin allow-scripts" ' +
     'src="' + embedUrl + '" ' +
     'frameborder="0" allowfullscreen>' +
     '</iframe>'
-- 
cgit v1.2.3