From b1dbd80a07814f5182b49964aecee57e03aaab48 Mon Sep 17 00:00:00 2001
From: Andy Butland <abutland73@gmail.com>
Date: Tue, 1 Apr 2025 09:07:08 +0200
Subject: [PATCH] Adds allow-same-origin to preview IFRAME. (#18895)

---
 src/Umbraco.Web.UI.Client/src/apps/preview/preview.element.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Umbraco.Web.UI.Client/src/apps/preview/preview.element.ts b/src/Umbraco.Web.UI.Client/src/apps/preview/preview.element.ts
index 3a49b33073..4897f21190 100644
--- a/src/Umbraco.Web.UI.Client/src/apps/preview/preview.element.ts
+++ b/src/Umbraco.Web.UI.Client/src/apps/preview/preview.element.ts
@@ -63,7 +63,7 @@ export class UmbPreviewElement extends UmbLitElement {
 						src=${this._previewUrl}
 						title="Page preview"
 						@load=${this.#onIFrameLoad}
-						sandbox="allow-scripts"></iframe>
+						sandbox="allow-scripts allow-same-origin"></iframe>
 				</div>
 			</div>
 			<div id="menu">