a!webContentField() allow-downloads sandbox flag

Hi,

With the recent security update to Chrome, drive-by-downloads are no longer permitted in an IFRAME element without explicit permission, see:

https://www.chromestatus.com/feature/5706745674465280

We have an application that generates documents using HotDocs that is presented in an a!webContentField() component.  However, the recent security update means that the download links no longer work for the documents that are being generated.  I am wondering if I can put in a feature request for the a!webContentField() to expose a boolean property called allowDownloads, which when set to true will add the "allow-downloads" value to the IFRAME's sandbox attribute?

If there is a workaround for this that someone knows of I would be really appreciative if this could be shared.

Cheers
Dwayne

  Discussion posts and replies are publicly visible

Parents Reply Children
No Data