175300 2017-08-07 16:18:37 -0700 [META] Implement missing iframe sandbox flags 2018-05-10 01:07:03 -0700 1 1 1 Unclassified WebKit DOM WebKit Nightly Build Unspecified Unspecified NEW https://bugs.webkit.org/show_bug.cgi?id=175281 https://html.spec.whatwg.org/multipage/origin.html#sandboxing P2 Normal --- 158875 171321 171327 175281 1 bfulgham webkit-unassigned aperez bfulgham cdumez fred.wang rbuis oldest_to_newest 1336204 0 bfulgham 2017-08-07 16:18:37 -0700 The current HTML5 specification documents a set of sandbox flags that are not currently supported in WebKit: 1. Storage area URLs 2. document.domain browsing context (see Bug 175281) 3. Modals flag (relax via "allow-modals") 4. Orientation lock (relax via "allow-orientation-lock") 5. Presentation mode (relax via "allow-presentation") We should implement these protections as well. 1340113 1 bfulgham 2017-08-18 09:44:26 -0700 Note that allow-modals is handled by Bug 171321. 1342020 2 aperez 2017-08-24 06:45:55 -0700 The “allow-popups-to-escape-sandbox” flag is now implemented, see bug #158875 1342415 3 fred.wang 2017-08-25 09:43:03 -0700 allow-top-navigation-by-user-activation was handled in bug 171327