search

dave / jsgo

GopherJS compiler, serving framework and CDN.
https://jsgo.io/<path>
MIT License
269 stars 11 forks source link

playground: Sandbox #8

Open hajimehoshi opened 6 years ago

hajimehoshi commented 6 years ago

Can the iframe have sandbox attribute? Now a Go script can break the editor itself. I think the necessary value is allow-forms allow-scripts allow-modals allow-popups.

dave commented 6 years ago

Good plan. I'll look into this.

hajimehoshi commented 6 years ago

https://play.jsgo.io/74145193d42f64d1e37698d937a458cada01b9c3 example to destroy the editor