// staticdata.dev — iframeSandboxTokens
// Generated file. Do not edit by hand.
// SPDX-License-Identifier: MIT

export const iframeSandboxTokens = [
  {
    "token": "allow-downloads",
    "description": "Allows the embedded browsing context to trigger file downloads. Without this token, download-initiating navigations are blocked."
  },
  {
    "token": "allow-forms",
    "description": "Allows the embedded page to submit forms. Without this token, form submissions are blocked."
  },
  {
    "token": "allow-modals",
    "description": "Allows the embedded page to open modal windows via alert(), confirm(), prompt(), and the beforeunload event dialog."
  },
  {
    "token": "allow-orientation-lock",
    "description": "Allows the embedded page to lock the screen orientation using the Screen Orientation API."
  },
  {
    "token": "allow-pointer-lock",
    "description": "Allows the embedded page to use the Pointer Lock API to capture mouse movement."
  },
  {
    "token": "allow-popups",
    "description": "Allows the embedded page to open new browsing contexts via window.open() or target=\"_blank\" links. Without this token, such operations silently fail."
  },
  {
    "token": "allow-popups-to-escape-sandbox",
    "description": "Allows popups opened by the sandboxed page to escape the sandbox — the new browsing context does not inherit the sandbox restrictions."
  },
  {
    "token": "allow-presentation",
    "description": "Allows the embedded page to start a presentation session using the Presentation API."
  },
  {
    "token": "allow-same-origin",
    "description": "Allows the content to be treated as being from its actual origin rather than a unique opaque origin. Without this token, the iframe's content is always treated as cross-origin, blocking access to same-origin cookies, storage, and the parent document."
  },
  {
    "token": "allow-scripts",
    "description": "Allows the embedded page to run scripts (but not create popups). Without this token, all scripting is disabled."
  },
  {
    "token": "allow-storage-access-by-user-activation",
    "description": "Allows the embedded page to request access to unpartitioned cookies via the Storage Access API when triggered by a user gesture. Defined by the Storage Access API specification rather than the HTML standard."
  },
  {
    "token": "allow-top-navigation",
    "description": "Allows the embedded page to navigate the top-level browsing context (i.e. the tab or window containing the iframe)."
  },
  {
    "token": "allow-top-navigation-by-user-activation",
    "description": "Allows the embedded page to navigate the top-level browsing context, but only when triggered by a user gesture such as a click."
  },
  {
    "token": "allow-top-navigation-to-custom-protocols",
    "description": "Allows the embedded page to navigate to non-HTTP(S) URLs (e.g. mailto:, tel:, or registered protocol handlers) that are handed off to external software, without allowing general top-level navigation."
  }
] as const;

export type SandboxToken = (typeof iframeSandboxTokens)[number];