[w3c/ServiceWorker] Sandboxing untrusted code offline is currently impossible (Issue #1727)

The normal approach to sandboxing untrusted HTML/JS is to use an iframe with a `sandbox` attribute.

This is not possible offline as a service worker cannot control a sandboxed iframe

Consider adding an `inherit-service-worker` value to the `sandbox` attribute, allowing the parent's service worker to intercept requests from a sandboxed iframe

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1727
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/ServiceWorker/issues/1727@github.com>