Session replay player blocked — about:blank iframe missing allow-scripts
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 39.9k
- Forks
- 3.4k
- Avg merge
- 6h 51m
- Merged PRs (30d)
- 232
Description
Our mobile session recordings list in our PostHog Cloud project but won't play. Browser console shows:
Blocked script execution in 'about:blank' because the document's frame is sandboxed and the 'allow-scripts' permission is
not set — at sessionRecordingPlayerLogic.ts:1335
Affected sessions include . Tested across multiple users, multiple iOS app versions, multiple
browsers (specify which). The recordings ARE captured (we see ~29 seconds of inactivity-skipping in the player UI) but
never render.
Looks like the player's iframe sandbox attribute is missing allow-scripts. Can you fix or guide?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in sessionRecordingPlayerLogic.ts around line 1335 and inspect how the session replay player's about:blank iframe is sandboxed. Reproduce with an affected mobile session and confirm the recording renders without the blocked-script console error. Done means the captured session plays successfully in the player.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- frontend
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100