Fix CodeQL alert: Sandbox attribute is missing on the Iframe (#438)

* Fix CodeQL alert: Sandbox attribute is missing on the Iframe * Update
microsoft · Sep 13, 2023 · 64be447 · 64be447
1 parent 6aae6f8
commit 64be447
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/plugins/cordova-plugin-inappbrowser/inapp-browser.js b/src/plugins/cordova-plugin-inappbrowser/inapp-browser.js
@@ -298,6 +298,7 @@ IframeBrowser.prototype.injectStyleFile = function (callback, args) {
 IframeBrowser.prototype._createFrame = function () {
     this._container = document.createElement('div');
     this._iframe = document.createElement('iframe');
+    this._iframe.sandbox = 'allow-modals allow-popups';
 
     // container style
     var style = this._container.style;