When highlighting an input form in an iframe my suggestions is to change the URL in the address bar of the web browser to the iframes URL. This way the user can easily control if the iframe is legitimate or not and also control if SSL is used or not in the iframe.
When the input form loses focus the URL in the address bar returns to the parents URL. This would add a lot of security when entering information in an input form in an iframe. _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security
