# "Unsafe JavaScript attempt to initiate navigation"

**URL:** <https://meta.discourse.org/t/unsafe-javascript-attempt-to-initiate-navigation/121940>\
**Category:** Product Support\
**Created:** [July 3, 2019, 2:37am UTC](https://meta.discourse.org/t/unsafe-javascript-attempt-to-initiate-navigation/121940 "2019-07-03T02:37:34Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![Mark\_Schmucker](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mark_schmucker/32/124810_2.png) [@Mark\_Schmucker](https://meta.discourse.org/u/Mark_Schmucker)\
**Post date:** [July 3, 2019, 2:37am UTC](https://meta.discourse.org/t/unsafe-javascript-attempt-to-initiate-navigation/121940/1 "2019-07-03T02:37:34Z")

</div>

I have a Typeform embedded in a post which allows users to certify that they meet certain qualifications. Upon completion, the form has a button to go to a topic. The button worked until recently; now it fails with:

> renderer.aa121ddee4aa58d14f43.js:13 Unsafe JavaScript attempt to initiate navigation for frame with origin ‘[https://forum.example.com](https://forum.example.com)’ from frame with URL [I’ve removed the url name]. The frame attempting navigation of the top-level window is sandboxed, but the flag of ‘allow-top-navigation’ or ‘allow-top-navigation-by-user-activation’ is not set.

I realize it could be related to Typeform, not Discourse, but Discourse seems the most likely to have changed. Have there been recent changes that could affect this? I’m up-to-date.

---

_[View the full topic](https://meta.discourse.org/t/unsafe-javascript-attempt-to-initiate-navigation/121940)._
