Allow 'sandbox' attribute for html::iframe (#9783)

roundcube · Feb 19, 2025 · 166636e · 166636e
1 parent 6d51c21
commit 166636e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/program/lib/Roundcube/html.php b/program/lib/Roundcube/html.php
@@ -243,7 +243,7 @@ public static function iframe($attr = null, $cont = null)
             $attr = ['src' => $attr];
         }
 
-        $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen'];
+        $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen', 'sandbox'];
 
         return self::tag('iframe', $attr, $cont, array_merge(self::$common_attrib, $allowed));
     }