Allow 'sandbox' attribute for html::iframe (#9783)

pabzm · web-flow · commit 166636e2cd2b · 2025-02-19T17:59:48.000+01:00
diff --git a/program/lib/Roundcube/html.php b/program/lib/Roundcube/html.php
@@ -243,7 +243,7 @@ public static function iframe($attr = null, $cont = null)
             $attr = ['src' => $attr];
         }
 
-        $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen'];
+        $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen', 'sandbox'];
 
         return self::tag('iframe', $attr, $cont, array_merge(self::$common_attrib, $allowed));
     }

Original file line number	Diff line number	Diff line change
`@@ -243,7 +243,7 @@ public static function iframe($attr = null, $cont = null)`
`243`	`243`	`$attr = ['src' => $attr];`
`244`	`244`	`}`
`245`	`245`
`246`		`- $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen'];`
	`246`	`+ $allowed = ['src', 'name', 'width', 'height', 'border', 'frameborder', 'onload', 'allowfullscreen', 'sandbox'];`
`247`	`247`
`248`	`248`	`return self::tag('iframe', $attr, $cont, array_merge(self::$common_attrib, $allowed));`
`249`	`249`	`}`