From 638f91e4a60cb0363a73e519da2b069d35d87c34 Mon Sep 17 00:00:00 2001 From: Tanner Linsley Date: Sun, 2 Aug 2026 15:06:19 -0600 Subject: [PATCH] Allow site embed routes in frames --- src/utils/frame-embedding.ts | 2 ++ tests/charts-catalog-frame-embedding.test.ts | 6 +++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/src/utils/frame-embedding.ts b/src/utils/frame-embedding.ts index 9df35fe91..0c565d220 100644 --- a/src/utils/frame-embedding.ts +++ b/src/utils/frame-embedding.ts @@ -2,6 +2,8 @@ import { isChartsCatalogEmbedPath } from './charts-catalog-embed' export function isFrameEmbeddingAllowed(pathname: string) { return ( + pathname === '/partners-embed' || + pathname === '/sponsors-embed' || pathname === '/stats/npm/embed' || isChartsCatalogEmbedPath(pathname) || isChartsCatalogEmbedPath(`${pathname}/`) diff --git a/tests/charts-catalog-frame-embedding.test.ts b/tests/charts-catalog-frame-embedding.test.ts index 30ca44bbc..33a8fe2ee 100644 --- a/tests/charts-catalog-frame-embedding.test.ts +++ b/tests/charts-catalog-frame-embedding.test.ts @@ -7,12 +7,16 @@ import { } from '../src/utils/charts-catalog-embed' import { isFrameEmbeddingAllowed } from '../src/utils/frame-embedding' -test('only exact catalog embed documents bypass the global frame denial', () => { +test('only explicit embed documents bypass the global frame denial', () => { + assert.equal(isFrameEmbeddingAllowed('/partners-embed'), true) + assert.equal(isFrameEmbeddingAllowed('/sponsors-embed'), true) assert.equal(isFrameEmbeddingAllowed('/charts/catalog/embed/01-line/'), true) assert.equal(isFrameEmbeddingAllowed('/charts/catalog/embed/01-line'), true) assert.equal(isFrameEmbeddingAllowed('/stats/npm/embed'), true) for (const pathname of [ + '/partners', + '/sponsors', '/charts/catalog/', '/charts/catalog/charts/01-line/', '/charts/catalog/embed/',