Re: Seamless transclusion of complex replaced elements

Brad Kemper wrote:
> Couldn't that be solved by not giving the document in the IFRAME 
> JavaScript access to things like the document's or body's 
> clientHeight, offsetHeight, scrollTop, scrollHeight, etc.

It's the other way around.  A document including a document from a different 
domain in an iframe (or object, or whatever) must not be able to extract any 
information from that child document.  That includes information like "preferred 
height".

That's discussed at length in the Mozilla bug I linked to, for what it's worth.

-Boris

Received on Wednesday, 20 February 2008 16:15:07 UTC