Merge branch 'feature/same-origin-in-sandbox' into develop

[SVCS-565] Closes: #300
CenterForOpenScience · Nov 14, 2017 · 8bb2dd4 · 8bb2dd4
2 parents b2ba110 + ac6dd2e
commit 8bb2dd4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mfr/server/static/js/mfr.js b/mfr/server/static/js/mfr.js
@@ -80,7 +80,7 @@
             self.pymParent.iframe.setAttribute('allowfullscreen', '');
             self.pymParent.iframe.setAttribute('webkitallowfullscreen', '');
             self.pymParent.iframe.setAttribute('scrolling', 'yes');
-            self.pymParent.iframe.setAttribute('sandbox', 'allow-scripts allow-popups');
+            self.pymParent.iframe.setAttribute('sandbox', 'allow-scripts allow-popups allow-same-origin');
 
             self.pymParent.el.appendChild(self.spinner);
             $(self.pymParent.iframe).on('load', function () {