News for hackers. Stuff that matters.

A comment on Webkit.js. Parent comment

Re:Webkit.js by comex on Friday June 20, 2014 @05:49PM (#7923085)
Any reason you couldn't just outright black out any pixels covered by different-origin iframes?
[ Parent | on HN ]
Re:Webkit.js by jgraham on Saturday June 21, 2014 @04:36AM (#7924497)
Even some same-origin things, for example input type=file, which can reveal paths on the local filesystem, would have to be blanked out.
[ Parent | on HN ]