W3C home > Mailing lists > Public > whatwg@whatwg.org > August 2010

[whatwg] @srcdoc and default @sandbox

From: Tab Atkins Jr. <jackalmage@gmail.com>
Date: Mon, 30 Aug 2010 16:11:37 -0700
Message-ID: <AANLkTinxq1k5pW6FA6XPQQQV0QkrVFhraXPhpU4dueeQ@mail.gmail.com>
On Mon, Aug 30, 2010 at 2:08 PM, Adam Barth <w3c at adambarth.com> wrote:
> On Mon, Aug 30, 2010 at 1:58 PM, Maciej Stachowiak <mjs at apple.com> wrote:
>> Should @seamless imply @sandbox too, then?
>
> I think there lots of use cases for seamless that don't require
> sandbox. ?For example, suppose a site wants to show a login form on
> many pages by only wants to implement the login logic once. ?It's
> entirely reasonable to wish to place the login form in a seamless
> iframe. ?If we required @sandbox for seamless, that would interfere
> with the login form working properly with password managers.

Precisely; @seamless was *not* designed with the intention of always
being used with @sandbox.  It's just a nice feature to have for
<iframe>s in general.  So there's no real connection between @seamless
and @sandbox like there is between @srcdoc and @sandbox.

~TJ
Received on Monday, 30 August 2010 16:11:37 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:26 UTC