# Iframe allow attribute not working

**URL:** <https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383>\
**Category:** Feature\
**Created:** [September 2, 2019, 9:10am UTC](https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383 "2019-09-02T09:10:31Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)\
**Post date:** [March 4, 2021, 9:15pm UTC](https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383/4 "2021-03-04T21:15:53Z")

</div>

I am also running into this problem. I would like to add a class on the IFRAME that I am embedding in my policy privacy post, which embeds the privacy tracking settings from our self-hosted Matomo installation. This would allow me to add a better border and some color to differentiate it from the rest of the privacy policy.

Despite having a `class="foo"` in my IFRAME element, it is being stripped out, apparently by the white-lister code above. Any chance this could be expanded to have a few more attributes allowed?

---

_[View the full topic](https://meta.discourse.org/t/iframe-allow-attribute-not-working/127383)._