With a Retool update we have lost allow-same-origin for iframes. We previously had a working Org Chart that can now no longer load because of the missing sandbox permission. The inspector shows that it is missing, but the Retool interface indicates it should be present. Model { "name": "Organis…

Is everyone seeing this self-hosted? If so, can you try setting ALLOW_SAME_ORIGIN_OPTION in your deployment? Seeing a security issue we addressed , that made this behavior opt-in.

Missing `allow-same-origin` in iFrame's in 3.22.6

hardselius December 13, 2023, 10:59pm 2

Missing `allow-same-origin` in iFrame's in 3.22.6