2 ms·if they were on the same domain you could load iframes with the parent site and do arbitrary CSRFby asddubs 5y agoif they were on the same domain you could load iframes with the parent site and do arbitrary CSRF