5 ms·
You can do that via iframe as well
by schrodinger 12y ago
You can do that via iframe as well
- leorocky 12y agoIf you allow custom HTML via an iframe and make it shareable you have to host the iframe from a different domain, otherwise it's XSS vulnerability heaven. The trick will be authentication because separate domains don't share sessions (and you wouldn't want a secured domain access to your session anyway) but you can do communication via postMessage.