3 ms·

The security risk is precisely why a lot of new services provide embeddable content via iframes now, rather than JS. On the other hand, this still isn't perfect

by borski 13y ago

The security risk is precisely why a lot of new services provide embeddable content via iframes now, rather than JS. On the other hand, this still isn't perfect - we wrote about it today, actually: https://www.tinfoilsecurity.com/blog/protect-your-website-from-embedded-content-iframe-security https://www.tinfoilsecurity.com/blog/protect-your-website-fr...

riskable 13y ago
As long as you host the JavaScript yourself this shouldn't be a problem. Why would it? Iframes suck.
- 3825 13y ago
  Iframes do suck. However, success of a whole crop of companies like Disqus depends on it sucking less. I am sure this is a known issue for these companies.
- borski 13y ago
  It's only not a problem if you audit every single line of JS you host yourself. Most companies and people don't.