News for hackers. Stuff that matters.
Re:HTML5 Sandbox - a bad idea by acdha on Saturday April 06, 2013 @11:04AM (#5503759)
Why is the answer not “HTML5 sandbox cannot compensate for non-security-minded developers”? After reading this and the discussion, the only thing which seems certain is that the vk.com developers need to set XFO.
Re:HTML5 Sandbox - a bad idea by homakov on Saturday April 06, 2013 @11:35AM (#5503873)
> HTML5 sandbox cannot compensate for non-security-minded developers

framebreaker worked well until it sandbox was invented. If we should blame someone - it is rather W3C, not VK.