3 ms·
Why aren't these ad scripts sandboxed? I thought you can't have arbitrary code from cross site domains have access.
by sourthyme 8y ago
Why aren't these ad scripts sandboxed? I thought you can't have arbitrary code from cross site domains have access.
- eliya_confiant 8y agoThe industry is moving in a direction where more and more ads will be sandboxed, we are just not there quite yet.
- dmux 8y agoThey often are sandboxed within an iframe element: (https://www.iab.com/guidelines/safeframe/ https://www.iab.com/guidelines/safeframe/)
- pmoriarty 8y agoWhy do ads need to contain code at all? Why not limit them to just static images?
- tinus_hn 8y agoBecause that’s not how the web works. There is only one sandbox per frame and all code in that frame is in the same sandbox. It doesn’t make much sense to do it differently because JavaScript can modify the behavior of the built in objects and thus that of other scripts in the same environment.
- Macha 8y agoBecause the advertisers want to be able to load it with scripts to track stuff like viewability, fraud etc., and since they have the money they ultimately have the power.