From 31df90a03a3e3fe3b06b446a7d9573dfbbd12393 Mon Sep 17 00:00:00 2001
From: Joachim Bauch <bauch@struktur.de>
Date: Mon, 27 Apr 2015 09:50:29 +0200
Subject: [PATCH] No need for "allow-same-origin" in presentation sandboxes.

---
 static/js/directives/odfcanvas.js | 2 +-
 static/js/directives/pdfcanvas.js | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/static/js/directives/odfcanvas.js b/static/js/directives/odfcanvas.js
index a5a035bc..ba96d944 100644
--- a/static/js/directives/odfcanvas.js
+++ b/static/js/directives/odfcanvas.js
@@ -231,7 +231,7 @@ define(['require', 'underscore', 'jquery', 'text!partials/odfcanvas_sandbox.html
 		return {
 			restrict: 'E',
 			replace: true,
-			template: '<div class="canvasContainer odfcontainer"><iframe allowfullscreen="true" mozallowfullscreen="true" webkitallowfullscreen="true" sandbox="allow-scripts allow-same-origin"></iframe></div>',
+			template: '<div class="canvasContainer odfcontainer"><iframe allowfullscreen="true" mozallowfullscreen="true" webkitallowfullscreen="true" sandbox="allow-scripts"></iframe></div>',
 			controller: controller
 		};
 
diff --git a/static/js/directives/pdfcanvas.js b/static/js/directives/pdfcanvas.js
index b425b2a7..e4327664 100644
--- a/static/js/directives/pdfcanvas.js
+++ b/static/js/directives/pdfcanvas.js
@@ -289,7 +289,7 @@ define(['require', 'underscore', 'jquery', 'text!partials/pdfcanvas_sandbox.html
 		return {
 			restrict: 'E',
 			replace: true,
-			template: '<div class="canvasContainer"><iframe allowfullscreen="true" mozallowfullscreen="true" webkitallowfullscreen="true" sandbox="allow-scripts allow-same-origin"></iframe></div>',
+			template: '<div class="canvasContainer"><iframe allowfullscreen="true" mozallowfullscreen="true" webkitallowfullscreen="true" sandbox="allow-scripts"></iframe></div>',
 			controller: controller
 		};