id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	launchpad_bug
1797	WUI: view content in an HTML5 sandboxed iframe	davidsarah		"Sandboxed iframes support loading content in a separate unique origin (when the {{{allow-same-origin}}} is not set). This solves many (not all) of the problems described in #615, for browsers that support it: Chrome, IE10+, and soon Firefox 17+.

Note that if we sandbox by default, that will affect the ability to save the raw version of files with in-browser-viewable MIME types served from Tahoe (because it will also save the framing page). To mitigate that we also need #827."	defect	new	major	soon	code-frontend-web	1.9.2		wui security usability javascript sandbox same-origin	freddyb