[whatwg] iframe sandbox, <object tag>

[Ian Melven]

----- Original Message -----
From: "Adam Barth" <w3c at adambarth.com>
To: "Jonas Sicking" <jonas at sicking.cc>
Cc: "Ian Melven" <imelven at mozilla.com>, whatwg at lists.whatwg.org
Sent: Monday, November 7, 2011 10:50:22 PM
Subject: Re: [whatwg] iframe sandbox, <object tag>

> On Mon, Nov 7, 2011 at 7:13 PM, Jonas Sicking <jonas at sicking.cc> wrote:
>> On Mon, Nov 7, 2011 at 2:49 PM, Adam Barth <w3c at adambarth.com> wrote:
>>>> - there's also a similar question about whether the <object> tag will (should) support
>>>> @sandbox when using the form <object type="text/html" data="something.html"> (which
>>>> is in the HTML5 spec) - thoughts and opinions also welcome here.
>>>
>>> That's probably a win too.
>>
>> Do people actually do this enough that it's worth spending time on?
>>
>> My concern here is that it might be confusing that @sandbox works for
>> <object> when it contains a HTML page, but not when it contains a
>> plugin.

> That's a good point.  Maybe it would be best on <frame> but not on <object>.

i think with the semantics of @sandbox on <iframe> and plugins, the interpretation
of @sandbox in general on object could not help but be confusing - adding a case where
it works for HTML doesn't seem to help here. 

so after this discussion, i agree: yes on <frame> no on <object> 

thanks
ian