[MOB-8515]: allow-popups-to-escape-sandbox

.env.example

@@ -10,3 +10,5 @@
 
 # Toggle this to true if you would need to hit our EU APIs.
 # IS_EU_ITERABLE_SERVICE=false
+
+# DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION=false

react-example/.env.example

@@ -8,3 +8,6 @@
 
 # Convenience variable to automatically set the login email during testing.
 # [email protected]
+
+# IS_EU_ITERABLE_SERVICE=false
+# DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION=false

src/constants.ts

@@ -7,6 +7,9 @@ export const RETRY_USER_ATTEMPTS = 0;
 const IS_EU_ITERABLE_SERVICE =
   process.env.IS_EU_ITERABLE_SERVICE === 'true' ? true : false;
 
+export const dangerouslyAllowJsPopupExecution =
+  process.env.DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION === 'true' ? true : false;
+
 const US_ITERABLE_DOMAIN = 'api.iterable.com';
 
 const EU_ITERABLE_DOMAIN = 'api.eu.iterable.com';

src/inapp/utils.ts

@@ -1,6 +1,7 @@
 import { by } from '@pabra/sortby';
 import {
   ANIMATION_DURATION,
+  dangerouslyAllowJsPopupExecution,
   DEFAULT_CLOSE_BUTTON_OFFSET_PERCENTAGE
 } from 'src/constants';
 import { WebInAppDisplaySettings } from 'src/inapp';
@@ -286,7 +287,9 @@ const generateSecuredIFrame = () => {
   // event handlers on elements in it preventing our custom link handling
   iframe.setAttribute(
     'sandbox',
-    'allow-same-origin allow-popups allow-top-navigation'
+    `allow-same-origin allow-popups allow-top-navigation ${
+      dangerouslyAllowJsPopupExecution ? 'allow-popups-to-escape-sandbox' : ''
+    }`
   );
   /*
     _display: none_ would remove the ability to set event handlers on elements

webpack.config.js

@@ -9,6 +9,8 @@ function getParsedEnv() {
       ...env.parsed,
       VERSION: version,
       IS_EU_ITERABLE_SERVICE: process.env.IS_EU_ITERABLE_SERVICE || false,
+      DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION:
+        process.env.DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION || false
     };
   }
 

webpack.dev.config.js

@@ -9,6 +9,8 @@ function getParsedEnv() {
       ...env.parsed,
       VERSION: version,
       IS_EU_ITERABLE_SERVICE: process.env.IS_EU_ITERABLE_SERVICE || false,
+      DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION:
+        process.env.DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION || false
     };
   }
 

webpack.node.config.js

@@ -9,6 +9,8 @@ function getParsedEnv() {
       ...env.parsed,
       VERSION: version,
       IS_EU_ITERABLE_SERVICE: process.env.IS_EU_ITERABLE_SERVICE || false,
+      DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION:
+        process.env.DANGEROUSLY_ALLOW_JS_POPUP_EXECUTION || false
     };
   }