[whatwg] Prevent a document from being manipulated by a "top" document

Anne van Kesteren annevk at opera.com
Tue Aug 2 03:38:25 PDT 2011


On Tue, 02 Aug 2011 12:33:18 +0200, Dennis Joachimsthaler  
<dennis at efjot.de> wrote:
> I took a look at the X-Frame-Options and it only disallows displaying
> in a frame, not forbidding only script access.

What kind of script access is allowed cross-origin that you are concerned  
about?


-- 
Anne van Kesteren
http://annevankesteren.nl/



More information about the whatwg mailing list