~/talk

IFRAME

Talkat CSS Day + HTML Special 2016 · 2016-06-16..06-17· [web-platform, security]
slides:none on file

Practical surprises and gotchas: tests across Chrome and Firefox show differing defaults for frameborder and inconsistent parsing of marginwidth percentages, 39 nested iframes expose that name-based targeting often resolves to the first match and can cross navigation boundaries, sandbox gives iframes a unique origin unless allow-same-origin is set, longdesc never forces a download, data: and javascript: src handling varies (IE blocks data:), fullscreen requires an explicit allow attribute, and srcdoc support and referer-policy behavior remain uneven across browsers.

AI-written summary · about

  1. 0:00Start
  2. 1:08Peter Van Der Zee
  3. 2:30Attributes of the Iframe
  4. 3:21Horizontal Alignment
  5. 4:17Demo
  6. 5:21Fullscreen
  7. 17:44Inheritance Tree
  8. 18:40Attribute
  9. 21:14Scrolling
  10. 21:55Sandbox Html5
  11. 23:01Allow Pop-Ups
  12. 27:08Bad Synergies
  13. 36:36Cross Frame Navigation
  14. 38:35How Do You Advise Using Iframes in What Use Cases Are the Preferable
  15. 41:26What Security Measures Would You Enable by Standard with the Sandbox Attribute of an Iframe
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.