arrow-down arrow at-sign bug check checkbox-checked checkbox-unchecked svg-checkmark chevron-right chevrons-right circle-down circle-left circle-right circle-up cloud2 svg-cross2 download download external-link filter github hash home leaf leaf left link-2 log-in log-out mail menu message-square minus plus radio-checked radio-checked2 radio-unchecked search settings spinner8 target twitter up upload-2 user users warning x zap
  • Home
  • Report a bug
  • Contribute
  • All issues
  • Login

URL: https://codepen.io/vidhill/pen/bNPEmX

Browser / Version: Safari 18.4
Operating System: Mac OS X 10.15.7
Tested Another Browser: Yes Chrome

Problem type: Site is not usable
Description: Buttons or links not working
Steps to Reproduce:
Codepen.io sends Safari different Sandbox flags for the <iframe> hosting the test content compared to Chrome.

Content served to Chrome for <iframe> content:

<iframe id="result" name="CodePen" title="CodePen Preview" src="https://codepen.io/vidhill/fullpage/bNPEmX?anon=true&amp;view=" sandbox="allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups-to-escape-sandbox allow-popups allow-presentation allow-same-origin allow-scripts allow-top-navigation-by-user-activation" allow="accelerometer *; bluetooth *; camera *; encrypted-media *; display-capture *; geolocation *; gyroscope *; microphone *; midi *; clipboard-read *; clipboard-write *; web-share *; serial *; xr-spatial-tracking *" scrolling="auto" allowtransparency="true" allowpaymentrequest="true" allowfullscreen="true" class="result-iframe " loading="lazy">
          </iframe>

Content served to Safari for <iframe> content:

<iframe id="result" name="CodePen" title="CodePen Preview" src="https://codepen.io/vidhill/fullpage/bNPEmX?anon=true&amp;view=" sandbox="allow-forms allow-modals allow-pointer-lock allow-popups-to-escape-sandbox allow-popups allow-same-origin allow-scripts allow-top-navigation-by-user-activation" allow="accelerometer *; ambient-light-sensor *; camera *; display-capture *; encrypted-media *; geolocation *; gyroscope *; microphone *; midi *; payment *; vr *; web-share *; serial *; xr-spatial-tracking *" scrolling="auto" allowtransparency="true" allowpaymentrequest="true" allowfullscreen="true" class="result-iframe " loading="lazy">
          </iframe>

They should be sending Safari the allow-downloads sandbox flag, and possibly the allow-presentation flag since that feature is under development and may be turned on by users.

Browser Configuration
  • None

From webcompat.com with ❤️

Please login to edit issues.

View issue on Github

Shortcut: Press l on your keyboard to open the label editor. Shortcut: Press g on your keyboard to be taken to the GitHub view of this page.
Needs Triage
#148530

codepen.io - Buttons or links not working

Opened: 2025-02-14
Reporter: brentfulgham
Comments: 2
  • Home
  • List of issues
  • About
  • Contribute
  • Contact
  • Privacy Policy
  • Terms of Service
  • Code of Conduct