From d2b014656b0fdc8eff21dcfb6fa8dd4610532177 Mon Sep 17 00:00:00 2001
From: Veloman Yunkan <veloman.yunkan@gmail.com>
Date: Tue, 2 May 2023 19:20:38 +0400
Subject: [PATCH] Fixed external links in the viewer iframe

Before this fix clicking an external link in the viewer iframe had no
effect (other than an error being reported in the browser dev tools
console) because the attempt to navigate the top browser context was
suppressed due to sandboxing.
---
 src/server/internalServer.cpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/server/internalServer.cpp b/src/server/internalServer.cpp
index 4896cd5d..36e8fe59 100644
--- a/src/server/internalServer.cpp
+++ b/src/server/internalServer.cpp
@@ -1088,6 +1088,7 @@ const std::string CONTENT_CSP_HEADER =
 
     "sandbox allow-scripts "
             "allow-same-origin "
+            "allow-top-navigation-by-user-activation "
             "allow-modals "
             "allow-popups "
             "allow-forms "