Skip to content

Commit dd048f7

Browse files
committed
Revert "Add allow-scripts permission to the authentication iframe"
This reverts commit 763d57b.
1 parent e3ff329 commit dd048f7

File tree

1 file changed

+2
-6
lines changed

1 file changed

+2
-6
lines changed

src/authentication/connector.ts

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -76,9 +76,7 @@ function checkForStorageAccess(auth: ClientConfiguration) {
7676
return new Promise((resolve, reject) => {
7777
removeIFrame();
7878

79-
createIFrame(`${auth.authentication_url}/request-storage-access.html`, {
80-
sandbox: "allow-scripts"
81-
});
79+
createIFrame(`${auth.authentication_url}/request-storage-access.html`);
8280
async function receiveMessage(event: MessageEvent) {
8381
if (event.origin !== auth.authentication_url) {
8482
return false;
@@ -407,9 +405,7 @@ const logInWithWebMessageAndPKCE = async (reset: boolean) => {
407405
window.addEventListener("message", receiveMessage, false);
408406

409407
const authUrl = encodeURL(auth.authorization, req);
410-
createIFrame(authUrl, {
411-
sandbox: "allow-scripts"
412-
});
408+
createIFrame(authUrl);
413409
} catch (err) {
414410
console.log("Error Silent refresh");
415411
console.log(err);

0 commit comments

Comments
 (0)