Confirmed users
394
edits
Benfrancis (talk | contribs) |
|||
Line 8: | Line 8: | ||
* Listen for cross-origin events - allow the outer application to catch events from the content inside the iframe, even if that content is from a different origin | * Listen for cross-origin events - allow the outer application to catch events from the content inside the iframe, even if that content is from a different origin | ||
** Load Start - When the iframe starts loading a new document (needed for tracking browsing history) | ** '''Load Start''' - When the iframe starts loading a new document (needed for tracking browsing history) | ||
** Progress monitor - to monitor the progress of the document being loaded inside the iframe (needed to implement a progress bar) | ** Progress monitor - to monitor the progress of the document being loaded inside the iframe (needed to implement a progress bar) | ||
** Load Stop - When the iFrame finishes loading a new document | ** '''Load Stop''' - When the iFrame finishes loading a new document | ||
** Title Change - When the title of an HTML document inside the iframe changes | ** '''Title Change''' - When the title of an HTML document inside the iframe changes | ||
** '''URL change''' | |||
** '''Favicon URL change''' | |||
** Security State - When we load a page over SSL | ** Security State - When we load a page over SSL | ||
* Access to content - provide access to content inside the iframe | * Access to content - provide access to content inside the iframe | ||
Line 20: | Line 22: | ||
** Find in page - Search the text of an HTML document inside an iframe | ** Find in page - Search the text of an HTML document inside an iframe | ||
* Control iframe - Allow programmatic control of the iframe | * Control iframe - Allow programmatic control of the iframe | ||
** Stop Load - Programatically stop the iframe from loading a document | ** '''Stop Load''' - Programatically stop the iframe from loading a document | ||
** Reload - Programmatically reload the contents of the iframe | ** '''Reload''' - Programmatically reload the contents of the iframe | ||
** Zoom - Programatically make the iframe content larger or smaller | ** Zoom - Programatically make the iframe content larger or smaller | ||
* Suppress some security measures | * Suppress some security measures | ||
** Suppress XFrame-Options Header - Render the contents of a document inside the iframe, even if it was returned with an X-Frame-Options DENY or SAMEORIGIN header. (e.g. web sites like GMail which return this header to prevent phishing scams will still be rendered inside this special iframe). | ** '''Suppress XFrame-Options Header''' - Render the contents of a document inside the iframe, even if it was returned with an X-Frame-Options DENY or SAMEORIGIN header. (e.g. web sites like GMail which return this header to prevent phishing scams will still be rendered inside this special iframe). | ||
* Manage some window.* APIs | * Manage some window.* APIs | ||
** alert(), confirm(), prompt() | ** '''alert(), confirm(), prompt()''' | ||
** open() | ** '''open()''' | ||
== Security Model == | == Security Model == |