A site (coscoshipping.com) sets iframe.src = "javascript:false"
and then takes ifr.contentWindow.document, which raises this:

the javascript protocol is not supported by edbrowse

Is this remotely legal for an iframe src? Anyway, the context for why they're doing it appears to be an extraneous third-party library so we can table it til it's a blocker of something real, if ever.


Reply via email to