Re: make links within an iframe replace the parent document

On 20 May 2013 16:20, Silvia Pfeiffer <silviapfeiffer1@gmail.com> wrote:
> On Tue, May 21, 2013 at 8:43 AM, Constantine A. Murenin
> <mureninc@gmail.com> wrote:
>> On 20 May 2013 14:52, Silvia Pfeiffer <silviapfeiffer1@gmail.com> wrote:
>>> The seamless attribute was indeed created for this use case. It states:
>>> "...seamless mode ...  will cause links to open in the parent browsing
>>> context ..."
>>>
>>> To avoid XSS issues, same-origin rules apply, so look at the details
>>> of http://www.w3.org/TR/html5/embedded-content-0.html#attr-iframe-seamless
>>
>> That makes no sense.  If you already control the content of the iframe
>> that you're embedding, then there are already other means to make the
>> links open in the parent browsing context.
>>
>> What about embedding non-same-origin content?  Why would any
>> legitimate websites that care about their users would /not/ want to
>> have the links open in the parent browsing window?
>>
>> Actually, why is it not even the default:  if the links are clicked on
>> within an iframe, why do they not replace the parent browsing context
>> by default?  This would seem like a big fail on part of the
>> implementation of iframes in modern browsers.
>>
>> And then instead of getting it right, someone comes up with
>> X-Frame-Options that effectively kills the iframe for use outside of
>> the same-origin sites in the first place. :-(  Sigh.
>
> Have you tried some of the suggestions on
> http://stackoverflow.com/questions/4804604/html5-iframe-seamless-attribute

I have a very specific and easily-defined problem here; none of the
answers from the question you mention go even close to addressing it
(the stylistic things I've already figured out with CSS, and it works
great already).

Still looking for a solution.

C.

Received on Tuesday, 21 May 2013 01:08:56 UTC