awesome-bookmarks/goose
3
0
Fork 0
mirror of https://github.com/block/goose.git synced 2026-07-17 12:56:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add allow-forms to sandbox attribute for form support

Browse Source
This commit is contained in:
Andrew Harvard
2026-02-05 09:30:09 -05:00
parent 0f2eaae067
commit a0ef38dcc7
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/goose-server/src/routes/templates/mcp_app_proxy.html
+2 -1
View File
@@ -32,7 +32,8 @@
// Sandbox restricts the iframe's capabilities
// allow-scripts: Let JS run
// allow-same-origin: Required for postMessage to work properly
guestIframe.setAttribute('sandbox', 'allow-scripts allow-same-origin');
// allow-forms: Needed if the app has forms
guestIframe.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-forms');
// Build Permission Policy allow attribute from requested permissions
var allowList = [];