[whatwg] Iframe Sandbox Attribute - allow-plugins?

Julian Reschke julian.reschke at gmx.de
Wed Jul 13 14:13:05 PDT 2011


On 2011-07-13 22:58, Adam Barth wrote:
> On Wed, Jul 13, 2011 at 1:55 PM, Julian Reschke<julian.reschke at gmx.de>  wrote:
>> On 2011-07-13 22:31, Adam Barth wrote:
>>> Adding allow-plugins today would defeat the prevention of parent
>>> redirection.
>>>
>>> The short answer is we need an API for informing plugins of the
>>> sandbox flags and a way of confirming that the plugins understand
>>> those bits before we can allow plugins inside sandboxed frames.
>>
>> ...but that API is outside the scope of what the W3C and the WhatWG
>> currently do, so I think it would be great if defining this flag could be
>> decoupled from progress on the plugin API layers.
>
> It is coupled in the sense that we can't implement the flag unless and
> until such a plug-in API exists.

Yes, but we can *define* the flag in HTML and write down what it means 
with respect to plugin APIs.

Best regards, Julian


More information about the whatwg mailing list