Re: Disallowing setting document.domain in sandboxed iframes
Boris Zbarsky <[email protected]> Fri, 09 Aug 2013 12:39:10 -0400
| Newsgroups | gmane.comp.mozilla.devel.dom |
|---|---|
| Message-ID | <[email protected]> |
On 8/9/13 12:32 PM, Bobby Holley wrote: > Don't sandboxed scopes already get a unique principal, for which > document.domain is meaningless? Not if you allow-same-origin. -Boris