From 5a418d73bdb07cf3d3270983b6881f2de8d58ad7 Mon Sep 17 00:00:00 2001
From: Meier Lukas <meierschlumpf@gmail.com>
Date: Fri, 21 Nov 2025 19:05:24 +0100
Subject: [PATCH] fix(iframe): allow clicking links within (#4521)

---
 packages/widgets/src/iframe/component.tsx | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/packages/widgets/src/iframe/component.tsx b/packages/widgets/src/iframe/component.tsx
index 05ab587a0..760c46b03 100644
--- a/packages/widgets/src/iframe/component.tsx
+++ b/packages/widgets/src/iframe/component.tsx
@@ -85,7 +85,13 @@ const getAllowedPermissions = (
 const getSandboxFlags = (
   permissions: Omit<WidgetComponentProps<"iframe">["options"], "embedUrl" | "allowScrolling">,
 ) => {
-  const baseSandbox = ["allow-scripts", "allow-same-origin", "allow-forms", "allow-popups"];
+  const baseSandbox = [
+    "allow-scripts",
+    "allow-same-origin",
+    "allow-forms",
+    "allow-popups",
+    "allow-top-navigation-by-user-activation",
+  ];
 
   if (permissions.allowFullScreen) {
     baseSandbox.push("allow-presentation");