detection of src & srcdoc parameters and parsing atributes
detection of multiples iframes in message
autoresize of the iframe to adjust height.
same security that for artifacts.
(first test failed is normal, is due to the way the code is structured and executed. When the script runs, it's trying to display the results of the security checks, but there's a timing issue with how the HTML is being parsed and displayed.)
Contributor License Agreement
By submitting this pull request, I confirm that I have read and fully agree to the Contributor License Agreement (CLA), and I am providing my contributions under its terms.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/17265
**Author:** [@rgaricano](https://github.com/rgaricano)
**Created:** 9/7/2025
**Status:** ❌ Closed
**Base:** `dev` ← **Head:** `dev-upd_iframe_HTMLToken`
---
### 📝 Commits (1)
- [`217fa85`](https://github.com/open-webui/open-webui/commit/217fa8540e71469c987a7b976b6ef90e49ae38de) Update iframe renderer in HTMLToken.svelte
### 📊 Changes
**1 file changed** (+75 additions, -15 deletions)
<details>
<summary>View changed files</summary>
📝 `src/lib/components/chat/Messages/Markdown/HTMLToken.svelte` (+75 -15)
</details>
### 📄 Description
### UPD: Improvement of iframe renderer
Added
- detection of src & srcdoc parameters and parsing atributes
- detection of multiples iframes in message
- autoresize of the iframe to adjust height.
- same security that for artifacts.
(first test failed is normal, is due to the way the code is structured and executed. When the script runs, it's trying to display the results of the security checks, but there's a timing issue with how the HTML is being parsed and displayed.)

____
### Contributor License Agreement
By submitting this pull request, I confirm that I have read and fully agree to the [Contributor License Agreement (CLA)](/CONTRIBUTOR_LICENSE_AGREEMENT), and I am providing my contributions under its terms.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/17265
Author: @rgaricano
Created: 9/7/2025
Status: ❌ Closed
Base:
dev← Head:dev-upd_iframe_HTMLToken📝 Commits (1)
217fa85Update iframe renderer in HTMLToken.svelte📊 Changes
1 file changed (+75 additions, -15 deletions)
View changed files
📝
src/lib/components/chat/Messages/Markdown/HTMLToken.svelte(+75 -15)📄 Description
UPD: Improvement of iframe renderer
Added
(first test failed is normal, is due to the way the code is structured and executed. When the script runs, it's trying to display the results of the security checks, but there's a timing issue with how the HTML is being parsed and displayed.)
Contributor License Agreement
By submitting this pull request, I confirm that I have read and fully agree to the Contributor License Agreement (CLA), and I am providing my contributions under its terms.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.