[Webkit-unassigned] [Bug 90613] Inside a sandboxed iframe, it should be possible to create another iframe and access it

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90613





--- Comment #8 from Ian 'Hixie' Hickson <ian at hixie.ch>  2012-07-12 10:04:09 PST ---
If you're proposing that frame A should be able to access from B but frame B should not be able to access frame A, that's basically a non-starter. It is _trivially_ easy to accidentally expose frame A to frame B, for example any time you pass a JS object from frame A to frame B you are also passing the frame A's global "Object" prototype.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.