Links inside Playroom frame are broken

[yceballost]

Hi

I think this is an issue from the last version in Playroom.

When you have an link to any place, "refuse the connection" appear in the browser

  <TextLink href="https://www.google.es">Link text</TextLink>

Braid Playroom Link → Does not work
Agriculture Design System Link (with older versions of Playroom) → Work

Is this expected or is it a bug?

[michaeltaranto]

The issue here is that the href of the link violates the X-Frame-Options of the requested site, i.e. Google seems to only allow within iframes on the same origin. You can see in the screenshot attached i tried a GitHub link too, and is has a CSP to guard against this.

Ultimately the site you link to controls this behaviour, but the reason you see it on the newer version of Playroom is that we now render "Preview Mode" in an iframe (as we do in "Edit Mode").

I think from Playroom's perspective this behaviour is desirable from a security perspective. Can you suggest otherwise?