Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Careful with that snippet, targetOrigin of * is dangerous. I could embed your iframed content on my own site and then you'd happily send me the entire HTML inside the iframe.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: