From c49b5eeb2b8b667d088c1c0609bca1080c809e04 Mon Sep 17 00:00:00 2001
From: Alexandre Iooss <erdnaxe@crans.org>
Date: Tue, 29 Sep 2020 17:47:36 +0200
Subject: [PATCH] Put iframe in a sandbox

---
 web/template/viewer.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/template/viewer.html b/web/template/viewer.html
index e639b2b..de38b13 100644
--- a/web/template/viewer.html
+++ b/web/template/viewer.html
@@ -30,7 +30,7 @@
   <!-- Chat -->
   <div class="col-chat" id="sideWidget">
     <iframe src="https://irc.crans.org/web/?join=stream_{{.Path}}&nick=viewer&password=&realname=Viewer"
-      title="Chat"></iframe>
+      title="Chat" sandbox="allow-scripts allow-forms allow-same-origin"></iframe>
   </div>
 </div>