The HTML Inline Frame Element is a nested browsing context, embedding another HTML page into the current page.
Questions tagged [iframe]
106 questions
16
votes
3 answers
Are browser wrappers in software bad for users?
These days I see a lot of browser wrappers in software. For example:
when you purchase something in the Steam desktop application and use PayPal, you enter your PayPal security details in a browser frame provided by Steam.
when you log in on the…
luttje
- 163
- 4
15
votes
1 answer
How to confirm that an embedded iframe can read cookies from parent?
I have this html code that I may put on my site that we are evaluating for security purposes. It's code is essentially this:
14
votes
1 answer
How can I embed iframe securely without restricting its functionality?
I'd want to embed an iframe from untrusted site into web application. Iframe:
should be able to run Javascript and browser plugins (Flash, etc.)
should not be able to access my web application through Javascript
_self, _parent, _top links should…
Andrei Botalov
- 5,267
- 10
- 45
- 73
13
votes
2 answers
How do I safely host third-party Javascript code in an iframe?
I'm building a website where users, among other things, can add embeds (YouTube, Google Forms, Airtable...) and show those embeds to other people. Embeds are snippets of HTML that can include