--- Comment #2 from Tisza Gergő <gti...@wikimedia.org> ---
Using iframes would also decrease our attack surface significantly, if we use a
separate domain for them. Plus it would make it simple to treat local and
external files in a uniform way. That would restrict what the JS code is
allowed to do, but a player probably doesn't need access to anything outside
its own frame anyway.
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
Wikibugs-l mailing list