Support different sandbox permissions on plugin registration (Fixes #112)
Change-Id: I0f99e378c44c6e53ac0a2f75727311864e73bf82
diff --git a/dev/js/src/plugin/service.js b/dev/js/src/plugin/service.js
index 3152f38..4029349 100644
--- a/dev/js/src/plugin/service.js
+++ b/dev/js/src/plugin/service.js
@@ -13,7 +13,8 @@
this.name = name;
this.src = src;
this.id = id;
-
+ this._perm = new Set();
+
// There is no close method defined yet
if (!this.close) {
this.close = function () {
@@ -42,7 +43,7 @@
e.setAttribute('allowTransparency',"true");
e.setAttribute('frameborder', 0);
// Allow forms in Plugins
- e.setAttribute('sandbox','allow-scripts allow-forms');
+ e.setAttribute('sandbox', this._permString());
e.style.height = '0px';
e.setAttribute('name', this.id);
e.setAttribute('src', this.src);
@@ -51,6 +52,25 @@
return e;
},
+ allow : function (permission) {
+ if (Array.isArray(permission)) {
+ permission.forEach(
+ p => this._perm.add(p)
+ );
+ }
+ else {
+ this._perm.add(permission);
+ };
+
+ if (this._load) {
+ this._load.setAttribute('sandbox', this._permString());
+ }
+ },
+
+ _permString : function () {
+ return Array.from(this._perm).sort().join(" ");
+ },
+
/**
* Send a message to the embedded service.
*/