60
edits
WebAPI/EmbeddedBrowserAPI: Difference between revisions
→Use Cases
| Line 25: | Line 25: | ||
* Suppress some security measures | * Suppress some security measures | ||
** Suppress XFrame-Options Header - Render the contents of a document inside the iframe, even if it was returned with an X-Frame-Options DENY or SAMEORIGIN header. (e.g. web sites like GMail which return this header to prevent phishing scams will still be rendered inside this special iframe). | ** Suppress XFrame-Options Header - Render the contents of a document inside the iframe, even if it was returned with an X-Frame-Options DENY or SAMEORIGIN header. (e.g. web sites like GMail which return this header to prevent phishing scams will still be rendered inside this special iframe). | ||
* Manage some window.* APIs | |||
** alert(), confirm(), prompt() | |||
** open() | |||
== Security Model == | == Security Model == | ||