toolbar: Add 'allow-same-origin' to fix AJAX within frames.

This commit is contained in:
Max Goodman
2013-11-20 23:15:51 -08:00
parent b2a4888496
commit f0bd94c528

View File

@@ -37,6 +37,6 @@
</head>
<body class="${'expanded' if thing.expanded else ''}" id="inner_toolbar" onload="window.frames[1].focus()">
<iframe frameborder="0" src="${add_sr('/toolbar/comments/'+thing.link._id36)}" id="reddit_panel" name="reddit_panel"></iframe>
<iframe frameborder="0" src="${thing.url}" id="reddit_link" name="reddit_link" sandbox="allow-scripts allow-forms"></iframe>
<iframe frameborder="0" src="${thing.url}" id="reddit_link" name="reddit_link" sandbox="allow-scripts allow-forms allow-same-origin"></iframe>
</body>
</html>