feat(sdk): set allowed features

jeremyckahn · Oct 16, 2023 · be1a6e5 · be1a6e5
1 parent 66adc2c
commit be1a6e5
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 7 deletions.
diff --git a/sdk/sdk.ts b/sdk/sdk.ts
@@ -1,3 +1,5 @@
+import { iframeFeatureAllowList } from '../src/config/iframeFeatureAllowList'
+
 export const defaultRootDomain = 'https://chitchatter.im/'
 
 // NOTE: This is a subset of standard iframe attributes:
@@ -38,6 +40,8 @@ class ChatEmbed extends HTMLElement {
       }
     }
 
+    iframe.setAttribute('allow', iframeFeatureAllowList.join(';'))
+
     shadow.appendChild(iframe)
   }
 }

diff --git a/src/config/iframeFeatureAllowList.ts b/src/config/iframeFeatureAllowList.ts
@@ -0,0 +1,6 @@
+export const iframeFeatureAllowList = [
+  'camera',
+  'microphone',
+  'display-capture',
+  'fullscreen',
+]
diff --git a/src/pages/Home/EmbedCodeDialog.tsx b/src/pages/Home/EmbedCodeDialog.tsx
@@ -8,19 +8,14 @@ import DialogContentText from '@mui/material/DialogContentText'
 import DialogTitle from '@mui/material/DialogTitle'
 import { CopyableBlock } from 'components/CopyableBlock/CopyableBlock'
 
+import { iframeFeatureAllowList } from 'config/iframeFeatureAllowList'
+
 interface EmbedCodeDialogProps {
   showEmbedCode: boolean
   handleEmbedCodeWindowClose: () => void
   embedUrl: URL
 }
 
-const iframeFeatureAllowList = [
-  'camera',
-  'microphone',
-  'display-capture',
-  'fullscreen',
-]
-
 export const EmbedCodeDialog = ({
   showEmbedCode,
   handleEmbedCodeWindowClose,