When I try to embed a form using the generated HTML, the form is blocked. It looks like it's a CSP / CORS bug.
To reproduce:
- Go to cryptpad.fr, select new form. Use the "Quick Scheduling Poll".
- Click Share. Click on the Embed tab. Copy the iframe HTML.
- Copy the iframe HTML into a barebones HTML document.
- Try to load the document, and the form won't load.
For example, here's my form iframe HTML
<iframe src="https://cryptpad.fr/form/#/2/form/view/+ePqxGD+cuw5aFm+rrP2MOTnGAZIil4jgmPx61jeSCk/embed/"></iframe>
Here's a barebones container:
<html>
<head>
<title>Test page</title>
</head>
<body>
<p>form:</p>
<iframe src="https://cryptpad.fr/form/#/2/form/view/+ePqxGD+cuw5aFm+rrP2MOTnGAZIil4jgmPx61jeSCk/embed/"></iframe></body>
</html>
If I save that in a file and load it locally, the embedded form does not load.
