trending/OpenMAIC
1
0
Fork 0
mirror of https://github.com/THU-MAIC/OpenMAIC.git synced 2026-10-18 05:40:25 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
@openmaic/renderer@0.0.3
OpenMAIC/tests/security
T
History
Sebastion d89ef645e1 fix(renderer): remove allow-same-origin from interactive srcDoc iframe sandbox (#726) 
Combining allow-scripts with allow-same-origin on a srcDoc iframe negates the sandbox; since the embedded HTML can come from LLM output or imported data, the iframe now runs in a null origin. postMessage control (targetOrigin='*') is unaffected. Adds a regression test. Fixes #725.
2026-06-15 16:45:41 +08:00
..
iframe-sandbox.test.ts
fix(renderer): remove allow-same-origin from interactive srcDoc iframe sandbox (#726)
2026-06-15 16:45:41 +08:00