187
edits
WebAPI/EmbeddedBrowserAPI: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
|||
| Line 33: | Line 33: | ||
* Red pill / blue pill -- pages shouldn't be able to tell that they're in an HTML browser. | * Red pill / blue pill -- pages shouldn't be able to tell that they're in an HTML browser. | ||
** window.top should stop at the topmost browser iframe ({{bug|704037}}) | ** window.top should stop at the topmost browser iframe ({{bug|704037}}) | ||
== Secondary concerns == | |||
* View-source | |||
* Content-policies (Adblock, NoScript) | |||
* Inject JS into page (Greasemonkey) | |||
* outerWidth / outerHeight | |||
* restrict which windows are traversed when searching for a named window | |||
== Security Model == | == Security Model == | ||