3 ms·
A protocol fix that meant that the server serving the content needed to opt in to no-script through a new X-Frame-Options header would mean that legacy content
by A1kmm 14y ago
A protocol fix that meant that the server serving the content needed to opt in to no-script through a new X-Frame-Options header would mean that legacy content like vk.com wouldn't send a X-Frame-Options header, and so wouldn't be able to be framed in a no-script iframe.
- homakov 14y agoand nobody will use it. because in fact NOBODY wants to run their pages w/o JS. And this is why sandbox is a bad idea.