From 655646d35bea8f52d805d1bcc36e58d10fb8a6d5 Mon Sep 17 00:00:00 2001
From: Lily Kuang <lily@preset.io>
Date: Wed, 3 Aug 2022 10:59:18 -0700
Subject: [PATCH] feat(embedded-SDK): enable CSV download (#20416)

* feat(embedded-sdk): enable CSV download

* lint
---
 superset-embedded-sdk/src/index.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/superset-embedded-sdk/src/index.ts b/superset-embedded-sdk/src/index.ts
index 32b02641e..317195522 100644
--- a/superset-embedded-sdk/src/index.ts
+++ b/superset-embedded-sdk/src/index.ts
@@ -105,9 +105,10 @@ export async function embedDashboard({
       iframe.sandbox.add("allow-scripts"); // obviously the iframe needs scripts
       iframe.sandbox.add("allow-presentation"); // for fullscreen charts
       iframe.sandbox.add("allow-downloads"); // for downloading charts as image
+      iframe.sandbox.add("allow-forms"); // for forms to submit
+      iframe.sandbox.add("allow-popups"); // for exporting charts as csv
       // add these ones if it turns out we need them:
       // iframe.sandbox.add("allow-top-navigation");
-      // iframe.sandbox.add("allow-forms");
 
       // add the event listener before setting src, to be 100% sure that we capture the load event
       iframe.addEventListener('load', () => {