From 8e8d478ece8538390560bb7f65f4baaa254d12cd Mon Sep 17 00:00:00 2001
From: fujie <fj1945@live.cn>
Date: Sat, 28 Feb 2026 12:57:22 +0800
Subject: [PATCH] fix(pipes): inject explicit sandbox policies to artifacts
 iframe to mitigate client-side block

---
 plugins/pipes/github-copilot-sdk/github_copilot_sdk.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/plugins/pipes/github-copilot-sdk/github_copilot_sdk.py b/plugins/pipes/github-copilot-sdk/github_copilot_sdk.py
index 4bdee9d..d579fd2 100644
--- a/plugins/pipes/github-copilot-sdk/github_copilot_sdk.py
+++ b/plugins/pipes/github-copilot-sdk/github_copilot_sdk.py
@@ -1228,6 +1228,8 @@ class Pipe:
                         # Artifacts mode: standard iframe for the AI to output directly (Infinite height)
                         iframe_html = (
                             f'<iframe src="{view_url}" '
+                            f'sandbox="allow-scripts allow-same-origin allow-popups allow-downloads allow-forms" '
+                            f'allow="fullscreen" '
                             f'style="width:100%; height:100vh; min-height:600px; border:none; border-radius:12px; '
                             f'box-shadow: 0 10px 40px rgba(0,0,0,0.1);"></iframe>'
                         )