Block iframes

Update: Proof of concept

Since discovering the iframe on Yahoo Groups, I’ve been thinking about the possible ill uses of that technique.

Basically, those that have interactive services: You need to disable iframes from working.

Iframes can be used to drop parasites, as well as ads, into services that never intended to become a vehicle for such.

So Yahoo Groups, now’s the time to act!

And any software - forums, guestbooks, wikis, classified - anything out there that allows contributions by people whose character you don’t know, make sure iframes can’t be used!

One Response to “Block iframes”

  1. alex Says:

    so this could potentially be abused to circumvent cookie encryption/certificates it seems… no? if you did a document.getElementById type thing 2 iframes could play off each other. maybe?

Leave a Reply