CODEWITHSUNDEEP
htmliframe
Steve Walsh
Steve Walsh

Reputation: 6645

What are the security vulnerabilities (if any) with using HTML5 iframes

I'm migrating from one version of a web client to a newer version running on the same machine.

The web client will be primarily used on an internal LAN interface but there will be some exposure to the WAN also.

As a migratory step, I intend to include pages from the newer webclient in the older webclient structure. I was planning to use iframes for this.

Are there any potential security risks that I should be aware of before doing this?

Thanks for your help.

Upvotes: 1

Views: 305

Answers (1)

desbest
desbest

Reputation: 4896

HTML5 iframes have sandboxing technology built in, but you have to enable it first. This means that XSS won't be an option, so if you're making iframe widgets that handle personal information, like Facebook do, as long as you do the usual stuff, there's nothing you should be concerned about.

Upvotes: 1

Related Questions