From 823cc0bd3a92285eb0830181f66590cf649e842a Mon Sep 17 00:00:00 2001 From: Patrick Date: Fri, 20 Mar 2020 15:43:05 +0800 Subject: [PATCH] added sandbox attribute with same origin and allow scripts to increase security and pass pen testing scans --- src/widget/chat-frame.tsx | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/widget/chat-frame.tsx b/src/widget/chat-frame.tsx index 6295000..89ed125 100644 --- a/src/widget/chat-frame.tsx +++ b/src/widget/chat-frame.tsx @@ -17,7 +17,8 @@ export default class ChatFrame extends Component { height={isMobile ? '94%' : '100%'} frameBorder='0' allowTransparency - style='background-color:transparent' /> + style='background-color:transparent' + sandbox="allow-same-origin allow-scripts"/> ); } }