Enum Sandbox 

pub enum Sandbox {
    AllowForms,
    AllowModals,
    AllowOrientationLock,
    AllowPointerLock,
    AllowPopups,
    AllowPopupsToEscapeSandbox,
    AllowPresentation,
    AllowSameOrigin,
    AllowScripts,
    AllowTopNavigation,
    AllowTopNavigationByUserActivation,
}

The sandbox attribute values for <iframe> elements.

Purpose

Enables extra restrictions on iframe content for security, allowing fine-grained control over what capabilities the embedded content has access to.

Usage Context

• Used with: <iframe> elements
• Security: Applies strict sandbox by default; flags allow specific capabilities
• Multiple values: Space-separated list of allowed capabilities
• Default: Empty sandbox (most restrictive)

Valid Values

• AllowForms: Allow form submission
• AllowModals: Allow opening modal windows (alert, confirm, print)
• AllowOrientationLock: Allow screen orientation lock
• AllowPointerLock: Allow Pointer Lock API
• AllowPopups: Allow popups (window.open, target=“_blank”)
• AllowPopupsToEscapeSandbox: Allow popups without sandbox restrictions
• AllowPresentation: Allow Presentation API
• AllowSameOrigin: Treat content as same-origin (use with caution)
• AllowScripts: Allow JavaScript execution
• AllowTopNavigation: Allow navigating top-level browsing context
• AllowTopNavigationByUserActivation: Allow top navigation only from user gesture

Example

use ironhtml_attributes::{AttributeValue, Sandbox};
let sandbox = Sandbox::AllowScripts;
assert_eq!(sandbox.to_attr_value(), "allow-scripts");

<iframe src="untrusted.html" sandbox></iframe>
<iframe src="widget.html" sandbox="allow-scripts allow-same-origin"></iframe>
<iframe src="game.html" sandbox="allow-scripts allow-pointer-lock"></iframe>

WHATWG Specification

• The iframe element
• The sandbox attribute

Variants

AllowForms

Allow form submission from the sandboxed content.

AllowModals

Allow the sandboxed content to open modal windows (alert, confirm, print, etc.).

AllowOrientationLock

Allow the sandboxed content to lock the screen orientation.

AllowPointerLock

Allow the sandboxed content to use the Pointer Lock API.

AllowPopups

Allow the sandboxed content to open popup windows.

AllowPopupsToEscapeSandbox

Allow popups opened by the sandboxed content to not inherit the sandbox restrictions.

AllowPresentation

Allow the sandboxed content to use the Presentation API.

AllowSameOrigin

Allow the content to be treated as being from its normal origin. WARNING: Dangerous when combined with allow-scripts.

AllowScripts

Allow the sandboxed content to run scripts (but not create popups).

AllowTopNavigation

Allow the sandboxed content to navigate the top-level browsing context (the full window).

AllowTopNavigationByUserActivation

Allow top-level navigation only when triggered by user activation (safer than allow-top-navigation).

Trait Implementations

impl AttributeValue for Sandbox

fn to_attr_value(&self) -> Cow<'static, str>

Convert to the attribute value string.

impl Clone for Sandbox

fn clone(&self) -> Sandbox

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Sandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Sandbox

fn eq(&self, other: &Sandbox) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for Sandbox

impl Eq for Sandbox

impl StructuralPartialEq for Sandbox