Re: [csswg-drafts] [css-sizing] Auto-resize iframes based on content (#1771)

> Side-channels are indeed real and problematic and therefore we should strive not to introduce more of them.

I'm sorry, I understand wanting to err on the safe side. A lot of "technically less secure" arguments make implementation and uptake harder without materially impacting security.  I was also just interested in what serious attack would be 😸.

Ergonomics is my main concern, which can be addressed by making this feature controllable via HTTP headers and `<meta>` tags.  Would a global JS variable be reasonable?

-- 
GitHub Notification of comment by indolering
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/1771#issuecomment-497642980 using your GitHub account

Received on Friday, 31 May 2019 09:28:13 UTC