Skip to content

Commit ba7a765

Browse files
committed
ACP2E-3064: Error Page Builder when editing CMS Block
- Remove "allow-same-origin" for security reasons.
1 parent 36c0f5d commit ba7a765

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

app/code/Magento/PageBuilder/view/adminhtml/web/template/page-builder.html

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@
3131
<with args="stage">
3232
<render></render>
3333
</with>
34-
<iframe attr="id: 'render_frame_' + id" sandbox="allow-scripts allow-same-origin" style="position: absolute; width:0; height:0; border: none;"></iframe>
34+
<!-- Do not modify the "sandbox" attribute without approval from a security engineer -->
35+
<iframe attr="id: 'render_frame_' + id" sandbox="allow-scripts" style="position: absolute; width:0; height:0; border: none;"></iframe>
3536
</if>
3637
</div>

0 commit comments

Comments
 (0)