Kevin, I was wondering if you (or anyone else) could comment on the
following. It was posted in the Hello World thread, but I guess that thread
went the other way.


On 1/30/08, Kevin Brown <[EMAIL PROTECTED]> wrote:
>
>
> Real production sites should always render the iframe on a different
> domain
> from the parent site This is critical for security. Without it, none of
> the
> other security solutions matter.
>

I was wondering about that. Obviously a separate domain is needed to (and
will) protect the parent container page from the gadget, does this also
protect gadgets from each other (in case multiple gadgets are put on one
page)?

Reply via email to