From 54d7a223707f03172efbb9e754db6e69709956d0 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Tue, 25 Aug 2026 16:34:49 -0400
Subject: [PATCH] refac

---
 .../chat/FileNav/PortPreview.svelte           |  5 +++-
 src/lib/components/chat/SettingsModal.svelte  |  2 ++
 .../common/InterfaceSettings.svelte           | 25 +++++++++++++++++++
 src/lib/i18n/locales/en-US/translation.json   |  2 ++
 src/lib/stores/index.ts                       |  1 +
 5 files changed, 34 insertions(+), 1 deletion(-)

diff --git a/src/lib/components/chat/FileNav/PortPreview.svelte b/src/lib/components/chat/FileNav/PortPreview.svelte
index 66cbc01e76..f4c184af99 100644
--- a/src/lib/components/chat/FileNav/PortPreview.svelte
+++ b/src/lib/components/chat/FileNav/PortPreview.svelte
@@ -1,6 +1,7 @@
 <script lang="ts">
 	import { getContext } from 'svelte';
 	import { getPortProxyUrl } from '$lib/apis/terminal';
+	import { settings } from '$lib/stores';
 	import Tooltip from '$lib/components/common/Tooltip.svelte';
 
 	const i18n = getContext('i18n');
@@ -268,7 +269,9 @@
 				src={proxyUrl}
 				title="Port {port} preview"
 				class="w-full h-full border-0 bg-white"
-				sandbox="allow-scripts allow-same-origin allow-forms allow-popups allow-modals allow-downloads"
+				sandbox="allow-scripts{($settings?.terminalPreviewAllowSameOrigin ?? true)
+					? ' allow-same-origin'
+					: ''} allow-forms allow-popups allow-modals allow-downloads"
 				on:load={onIframeLoad}
 			/>
 		{/key}
diff --git a/src/lib/components/chat/SettingsModal.svelte b/src/lib/components/chat/SettingsModal.svelte
index 79b93926c6..c32ef11c77 100644
--- a/src/lib/components/chat/SettingsModal.svelte
+++ b/src/lib/components/chat/SettingsModal.svelte
@@ -274,6 +274,8 @@
 				'iframe sandbox allow same origin',
 				'iframesandboxallowforms',
 				'iframesandboxallowsameorigin',
+				'terminal preview allow same origin',
+				'terminalpreviewallowsameorigin',
 				'imagecompression',
 				'image compression',
 				'imagemaxcompressionsize',
diff --git a/src/lib/components/common/InterfaceSettings.svelte b/src/lib/components/common/InterfaceSettings.svelte
index fa12437e44..8471aa85c4 100644
--- a/src/lib/components/common/InterfaceSettings.svelte
+++ b/src/lib/components/common/InterfaceSettings.svelte
@@ -109,6 +109,7 @@
 	let iframeSandboxAllowSameOrigin = false;
 	let iframeSandboxAllowForms = true;
 	let iframeSandboxAllowDownloads = true;
+	let terminalPreviewAllowSameOrigin = true;
 
 	let showManageFloatingActionButtonsModal = false;
 	let showManageImageCompressionModal = false;
@@ -310,6 +311,7 @@
 		iframeSandboxAllowSameOrigin = currentSettings?.iframeSandboxAllowSameOrigin ?? false;
 		iframeSandboxAllowForms = currentSettings?.iframeSandboxAllowForms ?? true;
 		iframeSandboxAllowDownloads = currentSettings?.iframeSandboxAllowDownloads ?? true;
+		terminalPreviewAllowSameOrigin = currentSettings?.terminalPreviewAllowSameOrigin ?? true;
 
 		stylizedPdfExport = currentSettings?.stylizedPdfExport ?? true;
 
@@ -1307,6 +1309,29 @@
 				</p>
 			</div>
 
+			<div>
+				<div class={settingRowClass}>
+					<div id="terminal-preview-allow-same-origin-label" class={settingLabelClass}>
+						{$i18n.t('Terminal Preview Allow Same Origin')}
+					</div>
+
+					<div class={settingControlClass}>
+						<Switch
+							ariaLabelledbyId="terminal-preview-allow-same-origin-label"
+							tooltip={true}
+							bind:state={terminalPreviewAllowSameOrigin}
+							inherited={isDefaultSetting('terminalPreviewAllowSameOrigin')}
+							on:change={() => {
+								saveSettings({ terminalPreviewAllowSameOrigin });
+							}}
+						/>
+					</div>
+				</div>
+				<p class={settingDescriptionClass}>
+					{$i18n.t('Allow terminal previews to access same-origin browser APIs.')}
+				</p>
+			</div>
+
 			<div>
 				<div class={settingRowClass}>
 					<div id="stylized-pdf-export-label" class={settingLabelClass}>
diff --git a/src/lib/i18n/locales/en-US/translation.json b/src/lib/i18n/locales/en-US/translation.json
index f4c5b9be30..22f734b380 100644
--- a/src/lib/i18n/locales/en-US/translation.json
+++ b/src/lib/i18n/locales/en-US/translation.json
@@ -155,6 +155,7 @@
 	"All Users": "",
 	"All users and system events": "",
 	"Allow artifacts to access same-origin browser APIs inside the sandbox.": "",
+	"Allow terminal previews to access same-origin browser APIs.": "",
 	"Allow automatic names for new chats.": "",
 	"Allow browser notifications for completed responses.": "",
 	"Allow Call": "",
@@ -1400,6 +1401,7 @@
 	"Idle Timeout": "",
 	"iframe Sandbox Allow Forms": "",
 	"iframe Sandbox Allow Same Origin": "",
+	"Terminal Preview Allow Same Origin": "",
 	"Image": "",
 	"Image Compression": "",
 	"Image Compression Height": "",
diff --git a/src/lib/stores/index.ts b/src/lib/stores/index.ts
index 9109e675d8..34f62b7d2c 100644
--- a/src/lib/stores/index.ts
+++ b/src/lib/stores/index.ts
@@ -250,6 +250,7 @@ type Settings = {
 	iframeSandboxAllowForms?: boolean;
 	iframeSandboxAllowSameOrigin?: boolean;
 	iframeSandboxAllowDownloads?: boolean;
+	terminalPreviewAllowSameOrigin?: boolean;
 	scrollOnBranchChange?: boolean;
 	scrollOnResponseGeneration?: boolean;
 	showFilesOnTerminalSelect?: boolean;