aboutsummaryrefslogtreecommitdiffstats
path: root/apps/web
diff options
context:
space:
mode:
authorMohamedBassem <me@mbassem.com>2025-08-23 16:03:06 +0300
committerMohamedBassem <me@mbassem.com>2025-08-23 16:03:06 +0300
commita4b2fc7ca89c7916a32a3e279ab3880ebaa7a734 (patch)
tree0697484b3881a9a43d72a9e38ba58c24b081bfea /apps/web
parent096af7efffe11be563844a361fafd6d158dd5c81 (diff)
downloadkarakeep-a4b2fc7ca89c7916a32a3e279ab3880ebaa7a734.tar.zst
fix(security): Add CSP policies on asset serving path
Diffstat (limited to 'apps/web')
-rw-r--r--apps/web/components/dashboard/preview/LinkContentSection.tsx1
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/web/components/dashboard/preview/LinkContentSection.tsx b/apps/web/components/dashboard/preview/LinkContentSection.tsx
index 67de4e75..a0a6f580 100644
--- a/apps/web/components/dashboard/preview/LinkContentSection.tsx
+++ b/apps/web/components/dashboard/preview/LinkContentSection.tsx
@@ -62,6 +62,7 @@ function FullPageArchiveSection({ link }: { link: ZBookmarkedLink }) {
link.fullPageArchiveAssetId ?? link.precrawledArchiveAssetId;
return (
<iframe
+ sandbox=""
title={link.url}
src={`/api/assets/${archiveAssetId}`}
className="relative h-full min-w-full"