Am 27.05.2012 02:16 schrieb Adam Barth: > Hi whatwg, > > I've added a proposal to the wiki > <http://wiki.whatwg.org/wiki/AllowSeamless> about letting a document > indicate that it is willing to be displayed seamlessly with a > cross-origin parent. This proposal is a refinement of the approach > previously discussed in this thread: > <http://old.nabble.com/crossorigin-property-on-iframe-td33677754.html>. > > Let me know if you have any feedback. I have a strong feeling that per-origin control should be made easy for authors. I must admit that I am not familiar with the mechanisms you name, Frame-Options and ancestor-origins - and both are quite hard to google for. From what I found I assume both are about HTTP headers. If they are solutions that can be used easily with server-side languages such as PHP, I think we can live with it. But anyway it is a complication; I'd personnally prefer something like allowseemles="example.org, *.example.org, shop.otherdomain.com" Or maybe space separated, and separate inherit-style with comma: allowseemles="example.org *.example.org shop.otherdomain.com, inherit-style" (Regardless of whether it is in the HTML element or in a META element.) -- MarkusReceived on Sunday, 27 May 2012 10:00:57 UTC
This archive was generated by hypermail 2.3.1 : Monday, 13 April 2015 23:09:13 UTC