From b089b427ab1f70b2cb110cd45c2cd8418b821709 Mon Sep 17 00:00:00 2001
From: Jan Raasch <jan@janraasch.com>
Date: Tue, 30 Jun 2015 15:28:54 +0200
Subject: [PATCH] Add IE-only security attr to HTMLDOMPropertyConfig

See https://msdn.microsoft.com/en-us/library/ms534622(v=vs.85).aspx for an in-depth specification.

This fixes #4169.
---
 src/renderers/dom/shared/HTMLDOMPropertyConfig.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/renderers/dom/shared/HTMLDOMPropertyConfig.js b/src/renderers/dom/shared/HTMLDOMPropertyConfig.js
index c35551ed7d..6ae478cb38 100644
--- a/src/renderers/dom/shared/HTMLDOMPropertyConfig.js
+++ b/src/renderers/dom/shared/HTMLDOMPropertyConfig.js
@@ -183,6 +183,9 @@ var HTMLDOMPropertyConfig = {
     itemRef: MUST_USE_ATTRIBUTE,
     // property is supported for OpenGraph in meta tags.
     property: null,
+    // IE-only attribute that specifies security restrictions on an iframe
+    // as an alternative to the sandbox attribute on IE<10
+    security: MUST_USE_ATTRIBUTE,
     // IE-only attribute that controls focus behavior
     unselectable: MUST_USE_ATTRIBUTE,
   },