Skip to content

Commit f43170d

Browse files
save file
1 parent ad738eb commit f43170d

File tree

1 file changed

+27
-8
lines changed

1 file changed

+27
-8
lines changed

utils/editors/html-editor/html/output-html/v2.0/output-html-v2.0.html

Lines changed: 27 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@
1212
#hdr
1313
{display:flex}
1414

15+
.radio
16+
{border:1px solid lightgray;padding:2px 10px;border-radius:5px}
17+
1518
#hldr
1619
{flex:1;box-sizing:border-box;position:relative}
1720
iframe
@@ -22,6 +25,10 @@
2225
</style>
2326

2427
<div id=hdr>
28+
<span id=allow-scripts class=radio>
29+
<input type=checkbox>
30+
allow-scripts
31+
</span>
2532
<div style='flex:1'></div>
2633
<button id=kill style='margin-right:20px'>kill</button>
2734
</div>
@@ -58,6 +65,8 @@
5865

5966
//vars:-
6067

68+
var chk = {};
69+
6170
var hldr;
6271
var iframe;
6372
var glass;
@@ -78,20 +87,21 @@
7887

7988
obj.initdom = function(rootnode){
8089

81-
shadow = host.shadowRoot;
90+
shadow = host.shadowRoot;
8291

83-
var style = $(shadow,'style');
92+
var style = $(shadow,'style');
8493
$.stylesheet.insert(style,'button','.icon');
8594

8695

87-
var hdr = $(shadow,'#hdr');
88-
89-
$(hdr,'#kill').onclick = btn.kill;
96+
var hdr = $(shadow,'#hdr');
97+
chk['allow-scripts'] = $.chkbox(hdr,'#allow-scripts');
98+
console.log(chk);
99+
$(hdr,'#kill').onclick = btn.kill;
90100

91101

92-
hldr = $(shadow,'#hldr');
93-
iframe = $(shadow,'iframe');
94-
glass = $(shadow,'#glass');
102+
hldr = $(shadow,'#hldr');
103+
iframe = $(shadow,'iframe');
104+
glass = $(shadow,'#glass');
95105

96106

97107
}//initdom
@@ -137,6 +147,15 @@
137147

138148
obj.srcdoc = function(html){
139149

150+
var attr = iframe.getAttribute('sandbox');
151+
var tokens = new Set(attr.split(/\s+/).filter(Boolean));
152+
if(chk['allow-scripts'].checked){
153+
tokens.add('allow-scripts');
154+
}
155+
var attr = [...tokens].join(' ');
156+
console.log(attr);
157+
iframe.setAttribute('sandbox',attr);
158+
140159
iframe.srcdoc = html;
141160

142161
}//srcdoc

0 commit comments

Comments
 (0)