Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Using the <iframe> "sandbox" property. At least stops things like alert('hey') and a full-page redirect


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: