3 ms·
Is the iframe pointed at a separate domain though? This is crucial to enforce the same origin security within javascript.
by nicboobees 11y ago
Is the iframe pointed at a separate domain though? This is crucial to enforce the same origin security within javascript.
- Pwntastic 11y agoYou could also make use of the sandbox[0] attribute, but that will really only benefit IE10+ users (and chrome, ff, others.) [0] https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox https://developer.mozilla.org/en-US/docs/Web/HTML/Element/if...