Project Title: Fix Iframe Cross-Origin Link Clicking & Proxy Issue in React/TypeScript AppProject
Budget: $30 – $250 USD
Project Title: Fix Iframe Cross-Origin Link Clicking & Proxy Issue in React/TypeScript AppProject
Description:I have a React + TypeScript application built on Bolt.new.
The app has a "Browse" page that embeds an external website (drivepk.com) inside an iframe using a Supabase Edge Function as a web proxy (PROXY_BASE).
The Problem:The initial search catalog loads fine in full width. However, once inside the iframe, clicking on deep links (like individual car advertisements, image galleries, or "Show Phone Number" buttons) does not work. The page either freezes, blocks the action, or throws a connection error ("Page load nahi ho saka"). This is caused by iframe sandboxing locks, relative path breaks, or strict Cross-Origin (CORS/CSP) security headers from the target site.What I Need You To Do:Modify src/pages/BrowsePage.tsx to safely inject a JavaScript click listener into the fetched HTML string (srcDoc).Ensure all nested links, button actions, and dynamic elements inside the iframe either route correctly back through our proxy or safely break out into an unblocked target _blank window/tab.Configure the <iframe> sandbox and allow parameters to permit scripts and popups without ruining the existing responsive design layout.(Optional).
If Supabase is too restricted, assist me in routing the iframe traffic through a lightweight, free Cloudflare Worker reverse proxy instead.Requirements:Expert knowledge of React, TypeScript, and Iframe postMessage communications.Solid experience dealing with CORS, Content-Security-Policy, and X-Frame-Options bypass mechanisms.Experience with Supabase Edge Functions or Cloudflare Workers.Must be able to deliver clean code that I can paste straight back into Bolt.new without breaking other components.
Description:I have a React + TypeScript application built on Bolt.new.
The app has a "Browse" page that embeds an external website (drivepk.com) inside an iframe using a Supabase Edge Function as a web proxy (PROXY_BASE).
The Problem:The initial search catalog loads fine in full width. However, once inside the iframe, clicking on deep links (like individual car advertisements, image galleries, or "Show Phone Number" buttons) does not work. The page either freezes, blocks the action, or throws a connection error ("Page load nahi ho saka"). This is caused by iframe sandboxing locks, relative path breaks, or strict Cross-Origin (CORS/CSP) security headers from the target site.What I Need You To Do:Modify src/pages/BrowsePage.tsx to safely inject a JavaScript click listener into the fetched HTML string (srcDoc).Ensure all nested links, button actions, and dynamic elements inside the iframe either route correctly back through our proxy or safely break out into an unblocked target _blank window/tab.Configure the <iframe> sandbox and allow parameters to permit scripts and popups without ruining the existing responsive design layout.(Optional).
If Supabase is too restricted, assist me in routing the iframe traffic through a lightweight, free Cloudflare Worker reverse proxy instead.Requirements:Expert knowledge of React, TypeScript, and Iframe postMessage communications.Solid experience dealing with CORS, Content-Security-Policy, and X-Frame-Options bypass mechanisms.Experience with Supabase Edge Functions or Cloudflare Workers.Must be able to deliver clean code that I can paste straight back into Bolt.new without breaking other components.