----- Original Message ----- From: "Adam Barth" <[email protected]> To: "Jonas Sicking" <[email protected]> Cc: "Ian Melven" <[email protected]>, [email protected] Sent: Monday, November 7, 2011 10:50:22 PM Subject: Re: [whatwg] iframe sandbox, <object tag>
> On Mon, Nov 7, 2011 at 7:13 PM, Jonas Sicking <[email protected]> wrote: >> On Mon, Nov 7, 2011 at 2:49 PM, Adam Barth <[email protected]> wrote: >>>> - there's also a similar question about whether the <object> tag will >>>> (should) support >>>> @sandbox when using the form <object type="text/html" >>>> data="something.html"> (which >>>> is in the HTML5 spec) - thoughts and opinions also welcome here. >>> >>> That's probably a win too. >> >> Do people actually do this enough that it's worth spending time on? >> >> My concern here is that it might be confusing that @sandbox works for >> <object> when it contains a HTML page, but not when it contains a >> plugin. > That's a good point. Maybe it would be best on <frame> but not on <object>. i think with the semantics of @sandbox on <iframe> and plugins, the interpretation of @sandbox in general on object could not help but be confusing - adding a case where it works for HTML doesn't seem to help here. so after this discussion, i agree: yes on <frame> no on <object> thanks ian
