glebm / rails_email_preview

Preview and edit app mailer templates in Rails.

Home Page:http://glebm.github.io/rails_email_preview

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Sandbox access violation

kylebolstad opened this issue · comments

The iframe (#src-iframe) lacks the "allow-same-origin" flag. As a result, there is no content in it when X-Frame-Options is set to DENY for security reasons. Any chance of adding the "allow-same-origin" flag?

Hi, the iframe code is here
Feel free to add it and PR

The iframe does not have sandbox, so allow-same-origin flag should not be necessary