W3C home > Mailing lists > Public > whatwg@whatwg.org > November 2011

[whatwg] iframe sandbox, <object tag>

From: Ian Melven <imelven@mozilla.com>
Date: Tue, 8 Nov 2011 08:16:37 -0800 (PST)
Message-ID: <1375019211.100775.1320768997794.JavaMail.root@zimbra1.shared.sjc1.mozilla.com>

----- Original Message -----
From: "Adam Barth" <w3c@adambarth.com>
To: "Jonas Sicking" <jonas at sicking.cc>
Cc: "Ian Melven" <imelven at mozilla.com>, whatwg at lists.whatwg.org
Sent: Monday, November 7, 2011 10:50:22 PM
Subject: Re: [whatwg] iframe sandbox, <object tag>

> On Mon, Nov 7, 2011 at 7:13 PM, Jonas Sicking <jonas at sicking.cc> wrote:
>> On Mon, Nov 7, 2011 at 2:49 PM, Adam Barth <w3c at adambarth.com> wrote:
>>>> - there's also a similar question about whether the <object> tag will (should) support
>>>> @sandbox when using the form <object type="text/html" data="something.html"> (which
>>>> is in the HTML5 spec) - thoughts and opinions also welcome here.
>>> That's probably a win too.
>> Do people actually do this enough that it's worth spending time on?
>> My concern here is that it might be confusing that @sandbox works for
>> <object> when it contains a HTML page, but not when it contains a
>> plugin.

> That's a good point.  Maybe it would be best on <frame> but not on <object>.

i think with the semantics of @sandbox on <iframe> and plugins, the interpretation
of @sandbox in general on object could not help but be confusing - adding a case where
it works for HTML doesn't seem to help here. 

so after this discussion, i agree: yes on <frame> no on <object> 

Received on Tuesday, 8 November 2011 08:16:37 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:37 UTC