fix: deny browser automated downloads from the import frame to trigge…

…r standard warning notification in web console
adobe · May 22, 2023 · 8c38da9 · 8c38da9
1 parent fe73c38
commit 8c38da9
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/js/crawl/crawl.ui.js b/js/crawl/crawl.ui.js
@@ -149,11 +149,11 @@ const attachListeners = () => {
         const frame = document.createElement('iframe');
         frame.id = 'crawl-content-frame';
 
+        let sandboxAttr = 'allow-same-origin';
         if (config.fields['crawl-enable-js']) {
-          frame.removeAttribute('sandbox');
-        } else {
-          frame.setAttribute('sandbox', 'allow-same-origin');
+          sandboxAttr += ' allow-scripts';
         }
+        frame.setAttribute('sandbox', sandboxAttr);
 
         const onLoad = async () => {
           if (config.fields['import-scroll-to-bottom']) {