Links on mindmap are sandboxed : unable to submit a form on the page linked

[Mer0me]

When you put a link to a form on a node of a map, after clicking the link you cannot submit the form on the target page because the "frame is sandboxed". Chrome is logging that error in the console :

"Blocked form submission to '' because the form's frame is sandboxed and the 'allow-forms' permission is not set."

Same issue with Firefox (but no error in console log).

[ardarandir]

I can confirm this bug affects many different functions of Nextcloud itself as well. Can not open a Collabora-File through a browser tab that had been opened by clicking a Mindmap-Link. Same goes for Decks (e.g. no longer possible to create cards) and other Nextcloud apps. It renders the Link function of Mindmap pretty useless or even breaking things from the user perspective.

[Mer0me]

Any news on that ?

[Mer0me]

Workaround : edit the file nextcloud/apps/files_mindmap/js/mindmap.js
Line 85, replace :
'z-index:1041;" src="'+viewer+'" sandbox="allow-scripts allow-same-origin allow-downloads allow-popups allow-modals ' +

by

'z-index:1041;" src="'+viewer+'" sandbox="allow-forms allow-scripts allow-same-origin allow-downloads allow-popups allow-modals ' +

(add allow-forms in the sandbox list)