ember-cli / ember-cli/ember-twiddle
Should the iframe point to a different domain?
Open
- Dominant language
- JavaScript
- Stars
- 268
- Forks
- 87
- PR merge metrics
- No merged PRs in 30d
Description
Firstly, the app is really cool. Hats off!!
In order to prevent XSS attacks and other security issues, should the iframe in ember-twiddle point to a different domain? Similar to JSFiddle. Currently, we can access the parent window from the iframe code and can access the browser cookies as well.
Correct me if my understanding is wrong.
Contributor guide
Assessment
This issue has not been assessed yet.