Confirmed users
197
edits
(Created page with "{{FeatureStatus |Feature name=Iframe Sandbox |Feature stage=Draft |Feature health=OK }} {{FeatureTeam |Feature lead engineer=Ian Melven |Feature security lead=Curtis Koenig |Feat...") |
No edit summary |
||
| Line 10: | Line 10: | ||
}} | }} | ||
{{FeaturePageBody | {{FeaturePageBody | ||
|Feature overview=The HTML5 standard specifies a new attribute for the IFRAME element, "sandbox". | |Feature overview=The HTML5 standard specifies a new attribute for the IFRAME element, "sandbox". See also [https://bugzilla.mozilla.org/show_bug.cgi?id=341604 bug 341604] "Implement HTML5 sandbox attribute for IFRAMEs" and [https://bugzilla.mozilla.org/show_bug.cgi?id=671389 | bug 671389] "Implement CSP sandbox directive" | ||
|Feature users and use cases=Users are web developers looking for a way to isolate content on our site and preventing it from having its default same origin privileges. | |Feature users and use cases=Users are web developers looking for a way to isolate content on our site and preventing it from having its default same origin privileges. | ||
|Feature requirements=If possible, this feature should be designed and implemented in a way that makes it usable for also implementing the sandboxing required to support the CSP (Content Security Policy) sandbox value also. | |Feature requirements=If possible, this feature should be designed and implemented in a way that makes it usable for also implementing the sandboxing required to support the CSP (Content Security Policy) sandbox value also. | ||