%3$s', esc_attr( $classes ), esc_url( $url ), esc_html__( 'Open Zoom Scheduler', 'jetpack' ) ); } /* * The embed is cross-origin to the WordPress page (host is allow-listed * above), so the framed Zoom page cannot reach the parent DOM regardless of * these tokens. allow-same-origin lets the booking page use its own cookies * and storage, allow-scripts runs its booking UI, and allow-popups/allow-forms * cover the confirmation flow. */ $sandbox = 'allow-scripts allow-same-origin allow-popups allow-forms'; return sprintf( '

', esc_attr( $classes ), esc_attr( EMBED_WRAPPER_CLASS ), esc_url( $embed_url ), esc_attr__( 'Zoom Scheduler', 'jetpack' ), IFRAME_HEIGHT, esc_attr( $sandbox ) ); }