On Tue, 29 Apr 2008, Adam Barth wrote:
A couple points about Section 4.1.4:
1) The spec, as written, prohibits frame-busting.
Test case: http://crypto.stanford.edu/~abarth/research/html5/frame-busting/
Browser behavior:
* Internet Explorer 8 beta: Navigation allowed.
* Firefox 3
On Tue, 29 Jan 2008, Collin Jackson wrote:
On Oct 26, 2007 3:51 PM, Adam Barth [EMAIL PROTECTED] wrote:
Collin Jackson and I have been looking at the frame navigation policy
of various browsers and have a suggestion for improving the frame
navigation policy in the HTML5 spec. As we
A couple points about Section 4.1.4:
1) The spec, as written, prohibits frame-busting.
Test case: http://crypto.stanford.edu/~abarth/research/html5/frame-busting/
Browser behavior:
* Internet Explorer 8 beta: Navigation allowed.
* Firefox 3 nightly: Navigation allowed.
* Safari 3.1: Navigation
On Oct 26, 2007 3:51 PM, Adam Barth [EMAIL PROTECTED] wrote:
Collin Jackson and I have been looking at the frame navigation policy
of various browsers and have a suggestion for improving the frame
navigation policy in the HTML5 spec. As we understand the spec [1],
it is stricter than IE7,