From 0adddb3084a1ca314454b2f654a007afce42925e Mon Sep 17 00:00:00 2001
From: Raphael Michel <michel@rami.io>
Date: Tue, 15 Mar 2022 12:26:41 +0100
Subject: [PATCH] Widget: Set allow and referrerpolicy on iframe

---
 src/pretix/static/pretixpresale/js/widget/widget.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/pretix/static/pretixpresale/js/widget/widget.js b/src/pretix/static/pretixpresale/js/widget/widget.js
index 6fee51d8c..d88b2943f 100644
--- a/src/pretix/static/pretixpresale/js/widget/widget.js
+++ b/src/pretix/static/pretixpresale/js/widget/widget.js
@@ -681,7 +681,9 @@ var shared_iframe_fragment = (
     + '</div>'
     + '<div class="pretix-widget-frame-inner" ref="frame-container" v-show="$root.frame_shown">'
     + '<iframe frameborder="0" width="650px" height="650px" @load="iframeLoaded" '
-    + '        :name="$root.parent.widget_id" src="about:blank" v-once>'
+    + '        :name="$root.parent.widget_id" src="about:blank" v-once'
+    + '        allow="autoplay *; camera *; fullscreen *; payment *"'
+    + '        referrerpolicy="origin">'
     + 'Please enable frames in your browser!'
     + '</iframe>'
     + '<div class="pretix-widget-frame-close"><a href="#" @click.prevent="close">'