Skip to content

Update embedded snippet file links to open in new tab

What does this MR do?

This fixes a Content Security Policy error when clicking on the file links in an embedded snippet while its embedded in another website.

Screenshots (strongly suggested)

Before:

https://jsfiddle.net/x7dtrogm/

Clicking on either of these links in the header: image

you will get a crashed iframe and an error in the console:

image

Refused to frame 'https://gitlab.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'".

After:

Link successfully opens in new tab

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

no security concerns

Edited by Paul Slaughter

Merge request reports