Isolate HTML popup openers (#2501)

2026-06-04 20:52:41 +02:00
parent ca8ca38a32
commit 9964f1382f
3 changed files with 39 additions and 0 deletions
--- a/static/js/codeRunner.js
+++ b/static/js/codeRunner.js
@@ -362,6 +362,7 @@ export function runHTML(code, panel) {
    addCloseBtn(panel);
    return;
  }
+  try { win.opener = null; } catch (_) {}
  win.document.open();
  win.document.write(code);
  win.document.close();