==================
Your LimeSurvey version: 6.0.6
Own server or LimeSurvey hosting: own
Survey theme/template: fruity
==================
Hi everyone!

I was having trouble with my iframes in limesurvey, which are displayed but interaction is disabled. I realised this is because whenever I include an iframe, limesurvey automatically adds the sandbox attribute: sandbox="allow-scripts allow-same-origin" . Is there any setting to remove this??

I had designed a solution using embedded forms that I used just a few months ago, but after the recent limesurvey updates it no longer works becuase of the sandboxing

Thanks for any help on this!

The editor is adding that attribute.

Use source mode to bypass the editor and enter the iframe html directly.

Thank you so much for the quick reply!

Please can you clarify what you mean by source mode? I thought that's what I was using, but I'm probably missing something basic here, sorry!

Here's a test example I created earlier, in a test survey question.

This is the question editor. It shows a button and an iframe I created as a test. Whenever I want to edit this, I click on the source button and enter my code there. Is this what you mean by source mode?
 

In this source mode, I might add something like this:
 

I click 'OK' to enter the source. When I open the source window again, the sandbox attribute is added automatically. If I remove it, it just gets added again.
 

Any further pointers would be greatly appreciated!

Disable the editor. Probably, whenever you open the field to edit it with the editor in WYSIWYG mode it adds this.

As this is a regression from previous versions, please file a bug report - bugs.limesurvey.org .

In the meantime, you can try this (untested) hack - use JavaScript to remove the attribute and then reload the iframe.

Extend your survey theme and add this to the end of your custom.js file.

Thank you holch for the editor suggestion, you're a star! I disabled the editor and I was able to finally remove those iframe attributes!

I wasn't sure how to disable the editor at first, so if there are any other limesurvey newbies reading this, this is what I did:
go to account (top right corner) > Personal settings > set HTML editor mode: Sourcecode text

Thank you tpartner for the suggestion! I managed to get around the issue by changing the editor, I pretty much only use the source mode anyway. But really good suggestion for the future. I'll submit a bug report.

I am truly grateful you guys are available to help out!

Thank you holch for the editor suggestion, you're a star! I disabled the editor and I was able to finally remove those iframe attributes!

Well, it was actually Tpartner that figured out where the issue is. I was just emphasizing that whenever you open this in WYSIWYG mode it might "correct" your code inserted in source code mode.

But great that you could get around this issue through disabling the WYSYWYG editor. But as Tpartner I think that it would be important to create a bug report, so this can be fixed. When you created the bug report, it would be great if you could post the link to it here, so we can follow the progress and eventually add notes to the bug report to emphasize it.

I've submitted a bug report: on the limesurvey bug reporting plaform linked by tpartner above, it is bug id 19197
(forum won't accept my post with the actual link....)

Hope this helps others facing this issue.

Thanks again for your help!

- bugs.limesurvey.org/view.php?id=19197