From 81fb703ad06dd7156eda0548f8e67864f676a463 Mon Sep 17 00:00:00 2001
From: Matt Hillsdon <matt.hillsdon@microbit.org>
Date: Wed, 14 Sep 2022 14:41:25 +0100
Subject: [PATCH] Sandbox the iframe.

This isn't particularly effective with the demo that loads the local
simulator as it's the same origin but useful for copy/paste of this code
with a real deployment URL.
---
 src/demo.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/demo.html b/src/demo.html
index 438d421a..b578a0e3 100644
--- a/src/demo.html
+++ b/src/demo.html
@@ -72,6 +72,7 @@ <h1>MicroPython-micro:bit simulator example embedding</h1>
             title="Simulator"
             frameborder="0"
             scrolling="no"
+            sandbox="allow-scripts allow-same-origin"
           ></iframe>
           <div id="sensors" class="column"></div>
         </div>