improve the security from iframe vulnerabilities (#5634)

ajaxorg · Aug 29, 2024 · 27a0b7a · 27a0b7a
1 parent 0e2813e
commit 27a0b7a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/index.html b/index.html
@@ -25,8 +25,8 @@
                         <h1><img src="./doc/site/images/textimage.png" alt="The high performance code editor for the web." /></h1>
                         <div id="page_logo">
                             <img src="./doc/site/images/ace-logo.png" />
-                            <iframe style="padding-top:5px" src="https://ghbtns.com/github-btn.html?user=ajaxorg&amp;repo=ace&amp;type=watch&amp;count=true" allowtransparency="true" frameborder="0" scrolling="0" width="110px" height="20px"></iframe>
-                            <iframe src="https://ghbtns.com/github-btn.html?user=ajaxorg&amp;repo=ace&amp;type=fork&amp;count=true" allowtransparency="true" frameborder="0" scrolling="0" width="110px" height="20px"></iframe>
+                            <iframe style="padding-top:5px" src="https://ghbtns.com/github-btn.html?user=ajaxorg&amp;repo=ace&amp;type=watch&amp;count=true" allowtransparency="true" frameborder="0" scrolling="0" width="110px" height="20px" sandbox="allow-scripts"></iframe>
+                            <iframe src="https://ghbtns.com/github-btn.html?user=ajaxorg&amp;repo=ace&amp;type=fork&amp;count=true" allowtransparency="true" frameborder="0" scrolling="0" width="110px" height="20px" sandbox="allow-scripts"></iframe>
                         </div>
                     </div>
                     <div style="clear: both"></div>