> What specifically does Google Docs do that requires it? Google wants documents to be embeddable on external sites. > How do you frame the victim site withou

> What specifically does Google Docs do that requires it? Google wants documents to be embeddable on external sites. > How do you frame the victim site without iframes? You don't, you use it in a different scenario. For example if you have HTML injection, but its fairly limited due to strict CSP.