fix: disallow network requests etc. in sandbox

j4k0xb · May 18, 2024 · 94050d2 · 94050d2
1 parent d6e1ce0
commit 94050d2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/apps/playground/src/sandbox.ts b/apps/playground/src/sandbox.ts
@@ -1,6 +1,11 @@
 import Sandybox from 'sandybox';
 
 const sandbox = await Sandybox.create();
+const iframe = document.querySelector<HTMLIFrameElement>('.sandybox');
+iframe?.contentDocument?.head.insertAdjacentHTML(
+  'afterbegin',
+  `<meta http-equiv="Content-Security-Policy" content="default-src 'none';">`,
+);
 const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
 
 export async function evalCode(code: string) {