Re: [webappsec] Rechartering: force secure-only child browsing contexts

Mike West <mkwst@google.com> wrote:
> I think this is a pretty reasonable concept to add to MIX.
>
> It's not clear to me whether it should be the default behavior, or whether
> it should be opted-into (similar to `sandbox`).

Obviously, if it cannot be done by default, then it could be added as
a sandbox directive. But, if we can avoid adding any new mechanism,
then that is greatly preferable, for simplicity's sake.

Cheers,
Brian

Received on Friday, 14 November 2014 03:11:33 UTC