W3C home > Mailing lists > Public > whatwg@whatwg.org > June 2010

[whatwg] HTML 5 : The Youtube response

From: Tab Atkins Jr. <jackalmage@gmail.com>
Date: Wed, 30 Jun 2010 08:30:25 -0700
Message-ID: <AANLkTimcoqV3IXhOynOUTGfva_FMsj1-LHWYCThMNJ2y@mail.gmail.com>
On Wed, Jun 30, 2010 at 8:14 AM, Philip J?genstedt <philipj at opera.com> wrote:
> On Wed, 30 Jun 2010 16:31:20 +0200, Tab Atkins Jr. <jackalmage at gmail.com>
> wrote:
>> In any case, embedding
>> videos via <iframe sandbox=allow-scripts> should work fine, once more
>> browsers support it.
>>
>> ~TJ
>>
>
> What issues would there be with simply using <iframe> without sandboxing?
> What doesn't the cross-origin policy stop?

Oh, duh.  Sorry, yeah, just pointing the iframe to a different-origin
resource on youtube.com would work fine.

~TJ
Received on Wednesday, 30 June 2010 08:30:25 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:24 UTC