3 ms·
The iframe was created for a different era of the web and it seems to be a constant source of security issues now. Would it be that bad to mark it as deprecated
by gregschlom 5y ago
The iframe was created for a different era of the web and it seems to be a constant source of security issues now. Would it be that bad to mark it as deprecated and completely drop support for it in a couple of years?
- merb 5y agoyou know iframe's can be sandboxed (still not the default tough)
- jefftk 5y agoIt is very common for websites to want to include some content from a different site, with a robust security boundary between them. Iframes have issues because security boundaries are hard. A site that does not want to allow any iframes can already ban them with CSP.