Skip to main content

<iframe> ↔ Inline Frame Inline Element to embed another HTML page into Web Page

Source: <iframe​>: The Inline Frame element - HTML: HyperText Markup Language | MDN

sandbox​

Attribute to restrict access to <iframe\> vs Browsing Context

src​

Attribute to set URL of Web Page to embed URL

srcDoc​

Attribute to load HTML static markup as String into <iframe\>

to manipulate iframe DOM​

document.querySelector("iframe").contentWindow

indirect comms with ael

References​

  1. srcDoc ↔ Attribute to load HTML static markup as String into <iframe\>

  2. sandbox ↔ Attribute to restrict access to <iframe\> vs Browsing Context

  3. "" ↔ to block access across <iframe\>

  4. ClickJack ↔ exploit to trick user to click for unintended action via invisible <iframe\> - common tactic for abusing ads

  5. "allow-scripts" ↔ to allow <iframe\> to execute JS