Thanks Andreas, that is helpful info.

On Friday, 8 June 2018 14:53:32 UTC+2, Andreas Hahn wrote:
>
> Hi Josiah, 
>
> from what I can tell, in certain browsers, the use of the <object> tag 
> disallows the javascript contexts of both sites to communicate via 
> messages. This would be the desired behaviour when embedding things into 
> your tiddlywiki, as <iframes> where it is allowed are also allowed to 
> inject javascript into your wiki, effectively taking it over, should it 
> be a malicious site. 
>
>
> /Andreas 
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"TiddlyWikiDev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to tiddlywikidev+unsubscr...@googlegroups.com.
To post to this group, send email to tiddlywikidev@googlegroups.com.
Visit this group at https://groups.google.com/group/tiddlywikidev.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/tiddlywikidev/8a994a6e-def9-4c38-ae0d-e3865dc07e2c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to