From ff837031e447faedfce1c5924f245b5b3b73bfc8 Mon Sep 17 00:00:00 2001
From: Classic298 <27028174+Classic298@users.noreply.github.com>
Date: Thu, 19 Feb 2026 23:05:47 +0100
Subject: [PATCH] Update iframe sandbox attributes based on settings (#21529)

Co-authored-by: :o <52920416+gg0h@users.noreply.github.com>
---
 src/lib/components/common/ToolCallDisplay.svelte | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/lib/components/common/ToolCallDisplay.svelte b/src/lib/components/common/ToolCallDisplay.svelte
index 9c2ed0932e..b692a3674d 100644
--- a/src/lib/components/common/ToolCallDisplay.svelte
+++ b/src/lib/components/common/ToolCallDisplay.svelte
@@ -16,6 +16,7 @@
 	import CheckCircle from '../icons/CheckCircle.svelte';
 	import Image from './Image.svelte';
 	import FullHeightIframe from './FullHeightIframe.svelte';
+	import { settings } from '$lib/stores';
 
 	export let id: string = '';
 	export let attributes: {
@@ -92,8 +93,8 @@
 						src={embed}
 						{args}
 						allowScripts={true}
-						allowForms={true}
-						allowSameOrigin={true}
+						allowForms={$settings?.iframeSandboxAllowForms ?? false}
+						allowSameOrigin={$settings?.iframeSandboxAllowSameOrigin ?? false}
 						allowPopups={true}
 					/>
 				</div>