- From: Craig Francis via GitHub <sysbot+gh@w3.org>
- Date: Wed, 24 Mar 2021 14:35:39 +0000
- To: public-css-archive@w3.org
@felixfbecker, with @tabatkins suggestion, a same-origin iframe won't require JS (good for your own sandboxed content). 3rd party content (from a different origin), that's going to be trickier to enforce (most 3rd parties will want JS), and should be less of an issue as different origins get their own process/renderer (ref [Post-Spectre Web Development](https://w3c.github.io/webappsec-post-spectre-webdev/) and "out-of-process iframes"). -- GitHub Notification of comment by craigfrancis Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/1771#issuecomment-805873428 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 24 March 2021 14:35:40 UTC