Features/Platform/Iframe Sandbox: Difference between revisions

Jump to navigation Jump to search
no edit summary
(Created page with "{{FeatureStatus |Feature name=Iframe Sandbox |Feature stage=Draft |Feature health=OK }} {{FeatureTeam |Feature lead engineer=Ian Melven |Feature security lead=Curtis Koenig |Feat...")
 
No edit summary
Line 10: Line 10:
}}
}}
{{FeaturePageBody
{{FeaturePageBody
|Feature overview=The HTML5 standard specifies a new attribute for the IFRAME element, "sandbox".  
|Feature overview=The HTML5 standard specifies a new attribute for the IFRAME element, "sandbox". See also [https://bugzilla.mozilla.org/show_bug.cgi?id=341604 bug 341604] "Implement HTML5 sandbox attribute for IFRAMEs" and [https://bugzilla.mozilla.org/show_bug.cgi?id=671389 | bug 671389] "Implement CSP sandbox directive"
|Feature users and use cases=Users are web developers looking for a way to isolate content on our site and preventing it from having its default same origin privileges.  
|Feature users and use cases=Users are web developers looking for a way to isolate content on our site and preventing it from having its default same origin privileges.  
|Feature requirements=If possible, this feature should be designed and implemented in a way that makes it usable for also implementing the sandboxing required to support the CSP (Content Security Policy) sandbox value also.  
|Feature requirements=If possible, this feature should be designed and implemented in a way that makes it usable for also implementing the sandboxing required to support the CSP (Content Security Policy) sandbox value also.  
Confirmed users
197

edits

Navigation menu