Merge pull request Sub6Resources#506 from vrtdev/feature/iframe-sandbox

ryan-berger · web-flow · commit e5e24d03ce9e · 2021-01-20T10:47:00.000-07:00
Respect iframe sandbox attribute to enable/disable javascript
diff --git a/lib/src/replaced_element.dart b/lib/src/replaced_element.dart
@@ -212,12 +212,15 @@ class IframeContentElement extends ReplacedElement {
 
   @override
   Widget toWidget(RenderContext context) {
+    final sandboxMode = attributes["sandbox"];
     return Container(
       width: width ?? (height ?? 150) * 2,
       height: height ?? (width ?? 300) / 2,
       child: WebView(
         initialUrl: src,
-        javascriptMode: JavascriptMode.unrestricted,
+        javascriptMode: sandboxMode == null || sandboxMode == "allow-scripts"
+            ? JavascriptMode.unrestricted
+            : JavascriptMode.disabled,
         navigationDelegate: navigationDelegate,
         gestureRecognizers: {
           Factory(() => PlatformViewVerticalGestureRecognizer())
