diff --git a/client/src/views/fields/wysiwyg.js b/client/src/views/fields/wysiwyg.js
index 2cdf170eea..3ece4edf89 100644
--- a/client/src/views/fields/wysiwyg.js
+++ b/client/src/views/fields/wysiwyg.js
@@ -365,6 +365,8 @@ class WysiwygFieldView extends TextFieldView {
         /** @type {HTMLIFrameElement} */
         const iframeElement = this.iframe = $iframe.get(0);
 
+        iframeElement.setAttribute('sandbox', '');
+
         if (!iframeElement || !iframeElement.contentWindow) {
             return;
         }