From 5d5f9cc943247131ee0875e1cdf304b3fe0ea68f Mon Sep 17 00:00:00 2001
From: Gregory Schier <gschier1990@gmail.com>
Date: Sat, 2 Aug 2025 09:47:34 -0700
Subject: [PATCH] Better iFrame sandboxing

https://feedback.yaak.app/p/completely-white-ui
---
 src-web/components/responseViewers/WebPageViewer.tsx | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src-web/components/responseViewers/WebPageViewer.tsx b/src-web/components/responseViewers/WebPageViewer.tsx
index 6547f73e..5d0669d3 100644
--- a/src-web/components/responseViewers/WebPageViewer.tsx
+++ b/src-web/components/responseViewers/WebPageViewer.tsx
@@ -21,9 +21,10 @@ export function WebPageViewer({ response }: Props) {
     <div className="h-full pb-3">
       <iframe
         key={body ? 'has-body' : 'no-body'}
-        title="Response preview"
+        title="Yaak response preview"
         srcDoc={contentForIframe}
-        sandbox="allow-scripts allow-same-origin"
+        sandbox="allow-scripts allow-forms"
+        referrerPolicy="no-referrer"
         className="h-full w-full rounded border border-border-subtle"
       />
     </div>