On Fri, 12 Feb 2010, Adam Barth wrote:
>
> Can a frame in @sandbox ever navigation the top-level frame?
Not without a user prompt, currently.
> If not, that would make it hard to use @sandbox to contain
> advertisements, which want to navigate |top| when the user clicks on the
> ad.
On Fri, 1
On Feb 12, 2010, at 11:54 PM, Adam Barth wrote:
On Fri, Feb 12, 2010 at 11:48 PM, Michal Zalewski
wrote:
Can a frame in @sandbox ever navigation the top-level frame? If
not,
that would make it hard to use @sandbox to contain advertisements,
which want to navigate |top| when the user click
On Sat, Feb 13, 2010 at 12:08 AM, Michal Zalewski wrote:
>> Perhaps we want an "allow-frame-busting" directive? In the
>> implementation we have an "allow-navigation" bit that covers
>> navigation |top| as well as window.open, etc. Maybe we want a more
>> general directive that twiddles this bit
> Perhaps we want an "allow-frame-busting" directive? In the
> implementation we have an "allow-navigation" bit that covers
> navigation |top| as well as window.open, etc. Maybe we want a more
> general directive that twiddles this bit?
I'm wondering if sites want to have control over the type o
On Fri, Feb 12, 2010 at 11:48 PM, Michal Zalewski wrote:
>> Can a frame in @sandbox ever navigation the top-level frame? If not,
>> that would make it hard to use @sandbox to contain advertisements,
>> which want to navigate |top| when the user clicks on the ad.
>
> Ads would want to be able to d
> Can a frame in @sandbox ever navigation the top-level frame? If not,
> that would make it hard to use @sandbox to contain advertisements,
> which want to navigate |top| when the user clicks on the ad.
Ads would want to be able to do that, but user-controlled gadgets
shouldn't. I suppose the top
Can a frame in @sandbox ever navigation the top-level frame? If not,
that would make it hard to use @sandbox to contain advertisements,
which want to navigate |top| when the user clicks on the ad.
Adam
