diff options
| author | Syndamia <kamen@syndamia.com> | 2025-02-03 08:44:18 +0200 |
|---|---|---|
| committer | Syndamia <kamen@syndamia.com> | 2025-02-03 08:44:18 +0200 |
| commit | 339316ad46ff876c64b878dd19dc02e3c4a305ab (patch) | |
| tree | c94a48c7cae2566d43ffe08472e9126d1d5bc1d6 | |
| parent | cea80fb8fafa21f3e8078be720826da2e4642719 (diff) | |
| download | nowayforward_human-339316ad46ff876c64b878dd19dc02e3c4a305ab.tar nowayforward_human-339316ad46ff876c64b878dd19dc02e3c4a305ab.tar.gz nowayforward_human-339316ad46ff876c64b878dd19dc02e3c4a305ab.zip | |
fix(views/archive): Sandbox the iframe, which turns off script execution
| -rw-r--r-- | views/archive/index.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/views/archive/index.php b/views/archive/index.php index 7e5c818..36c438a 100644 --- a/views/archive/index.php +++ b/views/archive/index.php @@ -17,7 +17,7 @@ ?> <?php if ($page !== null): ?> - <iframe src="<?= "/archives/{$page->WID}/index.php" ?>" scrolling="no"></iframe> + <iframe src="<?= "/archives/{$page->WID}/index.php" ?>" scrolling="no" sandbox></iframe> <form action="/archive/create" method="POST"> <input type="hidden" name="url" value="<?= $url ?>"> |