Bug 98951

Summary: Events should be dispatched to nodes inside a sandboxed iframe
Product: WebKit Reporter: eduardo <evn>
Component: DOMAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: abarth, bfulgham, matb, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   

eduardo
Reported 2012-10-10 13:17:56 PDT
Filing the crbug.com/144767 filed by randomdross00 here per abarth request :) When using the sandbox attribute on a frame it is often important for the outer page to receive a notification that the user clicked a link within the sandboxed content. To implement this on IE 10, it is possible to set allow-same-origin on the sandbox, then have the outer page set an event handler (eg: onclick) on links within the frame. Notably the sandboxed content still has script disabled and the event handlers should not subvert that level of protection.
Attachments
Lucas Forschler
Comment 1 2019-02-06 09:19:09 PST
Mass move bugs into the DOM component.
Matt Bierner
Comment 2 2021-10-19 14:35:56 PDT
We're running into this with web versions of VS Code. Here's a minimal repo that demonstrates the problem: https://github.com/mjbvz/safari-sandbox-link-issue This sample works in Chromium based browsers but fails in Safari
Radar WebKit Bug Importer
Comment 3 2022-02-11 09:34:02 PST
Note You need to log in before you can comment on or make changes to this bug.