Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I’m migrating from one version of a web client to a newer version running on the same machine.
The web client will be primarily used on an internal LAN interface but there will be some exposure to the WAN also.
As a migratory step, I intend to include pages from the newer webclient in the older webclient structure. I was planning to use iframes for this.
Are there any potential security risks that I should be aware of before doing this?
Thanks for your help.
HTML5 iframes have sandboxing technology built in, but you have to enable it first. This means that XSS won’t be an option, so if you’re making iframe widgets that handle personal information, like Facebook do, as long as you do the usual stuff, there’s nothing you should be concerned about.