# Iframe allow attribute not working

**URL:** <https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383>\
**Category:** Feature\
**Created:** [September 2, 2019, 9:10am UTC](https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383 "2019-09-02T09:10:31Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![santosguillamot](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/santosguillamot/32/143077_2.png) [@santosguillamot](https://meta.discourse.org/u/santosguillamot)\
**Post date:** [September 2, 2019, 2:56pm UTC](https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383/3 "2019-09-02T14:56:16Z")

</div>

I have this domain: `https://codesandbox.io/`. Shouldn’t be enough? I have found this code at Discourse where it whitelists just some iframe attributes:

> <https://github.com/discourse/discourse/blob/06d974d55cb44fb3577a98a2d89d93542200fe52/app/assets/javascripts/pretty-text/white-lister.js.es6#L164-L169>

If I include the attributes `height` and `weight` the iframe works fine, but I would like to allow the other attributes too.

Is there a way of allowing all codesandbox iframes? I thought including just the domain it would work.

Thank you!

EDIT:

> [@dax](#):
>
> Just to be sure, did you add the iframe url ( `https://codesandbox.io/embed/codesandbox-frontity-rnclp` ) in whitelist? If not, search the site setting `allowed iframes` .

I have tried adding this url in whitelist but it is not working neither.

---

_[View the full topic](https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383)._