Re: Seamless transclusion of complex replaced elements

Brad Kemper wrote:
> Couldn't that be solved by not giving the document in the IFRAME 
> JavaScript access to things like the document's or body's 
> clientHeight, offsetHeight, scrollTop, scrollHeight, etc.

It's the other way around.  A document including a document from a different 
domain in an iframe (or object, or whatever) must not be able to extract any 
information from that child document.  That includes information like "preferred 

That's discussed at length in the Mozilla bug I linked to, for what it's worth.


Received on Wednesday, 20 February 2008 16:15:07 UTC