[whatwg] Sandboxing ideas

Henri Sivonen wrote:
> I wonder if this issue could be solved on the layout/CSS level by 
> providing a way to make the height of an iframe depend on the actual 
> height of the root element of the document loaded in the iframe. That 
> is, would it be feasible to make the iframe contents have the layout/UI 
> feel of a part of the parent page while keeping the DOMs and script 
> security contexts separate?

It's certainly feasible; there's a patch for it for Gecko:
https://bugzilla.mozilla.org/show_bug.cgi?id=80713

If someone knowledgeable could step in to mediate the argument about 
whether height: auto is a reasonable CSS to trigger the behaviour, I'd 
be very grateful. :-)

Gerv

Received on Thursday, 10 May 2007 05:59:15 UTC