NEW 175300
[META] Implement missing iframe sandbox flags
https://bugs.webkit.org/show_bug.cgi?id=175300
Summary [META] Implement missing iframe sandbox flags
Brent Fulgham
Reported 2017-08-07 16:18:37 PDT
The current HTML5 specification documents a set of sandbox flags that are not currently supported in WebKit: 1. Storage area URLs 2. document.domain browsing context (see Bug 175281) 3. Modals flag (relax via "allow-modals") 4. Orientation lock (relax via "allow-orientation-lock") 5. Presentation mode (relax via "allow-presentation") We should implement these protections as well.
Attachments
Brent Fulgham
Comment 1 2017-08-18 09:44:26 PDT
Note that allow-modals is handled by Bug 171321.
Adrian Perez
Comment 2 2017-08-24 06:45:55 PDT
The “allow-popups-to-escape-sandbox” flag is now implemented, see bug #158875
Frédéric Wang (:fredw)
Comment 3 2017-08-25 09:43:03 PDT
allow-top-navigation-by-user-activation was handled in bug 171327
Note You need to log in before you can comment on or make changes to this bug.