@mocanvas/mocanvas · constant
declare const EMBED_SANDBOX = "allow-scripts allow-same-origin allow-popups"The sandbox an embedded page runs in. Scripts and same-origin are what makes a player work at all; popups let a "watch on the site" button escape. Nothing else is granted — no forms, no top-level navigation, no pointer lock.
mocanvas is built by Symbio. Free for non-commercial, non-profit and development use; commercial use needs an agreement. Not affiliated with or endorsed by tldraw.