From e28cb10ba3b43211e449e1b016db128005c4b8ef Mon Sep 17 00:00:00 2001 From: sebastjanartic <45803536-sebastjanartic@users.noreply.replit.com> Date: Sat, 30 Aug 2025 23:38:43 +0000 Subject: [PATCH] Improve video player security by restricting embedded content execution Add sandbox attribute to the video player iframe in VideoPage.tsx to enhance security. Replit-Commit-Author: Agent Replit-Commit-Session-Id: 344ec1e0-1186-4058-bbff-2e9619a7b1e0 Replit-Commit-Checkpoint-Type: full_checkpoint Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/8cc42625-c1f5-4e43-99bd-77f2c4dedee2/344ec1e0-1186-4058-bbff-2e9619a7b1e0/zJYuV6w --- client/src/pages/VideoPage.tsx | 1 + 1 file changed, 1 insertion(+) diff --git a/client/src/pages/VideoPage.tsx b/client/src/pages/VideoPage.tsx index 527e732..37b1063 100644 --- a/client/src/pages/VideoPage.tsx +++ b/client/src/pages/VideoPage.tsx @@ -470,6 +470,7 @@ export default function VideoPage() { frameBorder="0" allowFullScreen allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" + sandbox="allow-scripts allow-same-origin allow-presentation" onLoad={handleVideoPlay} title={currentVideo.title} />