Since a long time ago. This is old news. iFrame sandboxing is now a two-way street, depending on configuration. Not only can an iFrame be prevented from accessi

Since a long time ago. This is old news. iFrame sandboxing is now a two-way street, depending on configuration. Not only can an iFrame be prevented from accessing the parent frame, a parent frame can be prevented from accessing the child frame. It is still vulnerable to clickjacking, but to reduce the impact of that, using one-tap sign up only allows the most basic Google permissions. https://news.ycombinator.com/item?id=17044518 https://news.ycombinator.com/item?id=17044518 https://developers.google.com/identity/one-tap/web https://developers.google.com/identity/one-tap/web