[tahoe-lafs-trac-stream] [tahoe-lafs] #1797: WUI: view content in an HTML5 sandboxed iframe

[tahoe-lafs]

#1797: WUI: view content in an HTML5 sandboxed iframe
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:
  davidsarah             |     Status:  new
         Type:  defect   |  Milestone:  soon
     Priority:  major    |    Version:  1.9.2
    Component:  code-    |   Keywords:  wui security usability javascript
  frontend-web           |  sandbox same-origin
   Resolution:           |
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Comment (by davidsarah):

 Note that HTML5 sandbox does not in any way require JS. Nor does it stop
 single-page JS webapps served from Tahoe from working, if allow-scripts is
 set in the sandbox tag. Multi-page JS webapps can also work if they do not
 rely on same-origin information sharing, although we might need to handle
 .css and .js filetypes differently because the browser will be expecting
 them to be served raw, not framed.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1797#comment:1>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage