[whatwg] iframe sandbox attribute

• From: Boris Zbarsky <bzbarsky@MIT.EDU>
• Date: Mon, 26 Mar 2012 15:16:57 -0700
• Message-ID: <4F70EAD9.1000202@mit.edu>

On 3/26/12 3:13 PM, Mounir Lamouri wrote:
> I do not like [PutForwards=value] but I still believe
> DOMSettableTokenList is useful.

I think the issue in this case is that the DOMSettableTokenList 
representation of the sandbox attribute, as specced, cannot distinguish 
between "not sandboxed at all" and "sandboxed, with no loosening of any 
restrictions".

That makes it very difficult to use, in my opinion.  Very easy to shoot 
yourself in the foot.

-Boris

Received on Monday, 26 March 2012 15:16:57 UTC