[whatwg] Iframe Sandbox Attribute - allow-plugins?
julian.reschke at gmx.de
Wed Jul 13 14:13:05 PDT 2011
On 2011-07-13 22:58, Adam Barth wrote:
> On Wed, Jul 13, 2011 at 1:55 PM, Julian Reschke<julian.reschke at gmx.de> wrote:
>> On 2011-07-13 22:31, Adam Barth wrote:
>>> Adding allow-plugins today would defeat the prevention of parent
>>> The short answer is we need an API for informing plugins of the
>>> sandbox flags and a way of confirming that the plugins understand
>>> those bits before we can allow plugins inside sandboxed frames.
>> ...but that API is outside the scope of what the W3C and the WhatWG
>> currently do, so I think it would be great if defining this flag could be
>> decoupled from progress on the plugin API layers.
> It is coupled in the sense that we can't implement the flag unless and
> until such a plug-in API exists.
Yes, but we can *define* the flag in HTML and write down what it means
with respect to plugin APIs.
Best regards, Julian
More information about the whatwg