Dowe

DISPLAY

Iframe

Iframe embeds one HTTPS document or same-origin internal route through the platform web engine with an explicit accessibility and security contract.

SECURITY FIRST

Own the boundary

The embedded page never receives a Dowe JavaScript bridge.

PLAYGROUND

Preview a same-origin route

Internal routes are useful in documentation and local development because the iframe follows the current Views origin and port.

Iframe src:"/examples/appbar-one" title:"Local AppBar example" loading:"lazy" sandbox:"scripts same-origin forms" allow:"fullscreen; autoplay" allowFullscreen:true w:"full" h:96 rounded:"lg" border:1

POLICY COMBINATIONS

Choose the smallest capability set

Loading, allow, and sandbox are static source props. Their values are checked before generation and mapped to HTML, WKWebView, and Android WebView behavior.

INTERACTIVE MEDIA

Use allow and allowFullscreen only when the embedded document needs them.

STRICT EMBED

An empty sandbox value is the strictest sandbox. Add tokens only when the page contract requires them.

Iframe src:"https://example.com/embed" title:"Interactive media" loading:"eager" allow:"fullscreen; autoplay; picture-in-picture" sandbox:"scripts same-origin forms" allowFullscreen:true
Iframe src:"/examples/appbar-two" title:"Strict internal preview" loading:"lazy" sandbox:""

SOURCE

HTTPS or internal

Remote sources must be HTTPS. Local routes must begin with exactly one slash.

ACCESSIBILITY

Title is required

The quoted title labels the embedded document on web and native targets.

LIMITS

No hidden bridge

Dowe does not inject headers, cookies, downloads, popups, or JavaScript-to-native bridges.

API

Props

Iframe also accepts common identity, spacing, sizing, radius, border, visibility, and accessibility props.

Prop	Type	Default
No data There are no records to display

No data