3 ms·
The interstitial for blocked content is implemented on a per-page level. You can test this yourself by creating a test page with an iframe to http://ianfette.or
by zetafunction 11y ago
The interstitial for blocked content is implemented on a per-page level. You can test this yourself by creating a test page with an iframe to http://ianfette.org http://ianfette.org.
Suppose that Chrome just tried to replace the malicious embedded content. What happens when that embedded content is styled with CSS properties to make it hidden from the user?
- the8472 11y agoThey could overlay the message or have an information bar or whatever. UI design is not an argument against more measured blocking. I don't see a technical necessity to block a whole top-level page when the security model of a browser consists of many different origins.
- leereeves 11y agoErring on the side of caution. If a page has included known exploits, it might also include unknown exploits.