why doesn't google use html5 sandbox feature on iframes?

Forum Moderators: martinibuster

Message Too Old, No Replies

why doesn't google use html5 sandbox feature on iframes?

limit damage of bad advertisers

amznVibe

5:46 pm on Oct 30, 2014 (gmt 0)

I'm getting tired of reports of ads in adsense that do (new window) popups or alerts that change page navigation.

Using the html5 sandbox feature on iframes would stop 99% of this stuff and is available in all modern browsers except IE9

So why doesn't google create the iframes with sandboxing?

woody midrib

7:02 pm on Nov 1, 2014 (gmt 0)

This probably wouldn't help much as long as Google still supports Flash ads. You can do a even more nasty things with Flash than with JavaScript. Using the script blocking feature of the sandbox attribute is also not an option since ads rely heavily on JavaScript.

amznVibe

6:47 am on Nov 2, 2014 (gmt 0)

No you wouldn't block script. You would block page navigation changes and other nonsense.

Flash doesn't run on virtually all mobile devices anymore, which is a good thing.

I'm wondering if I can increase frame sandboxing after domcontentloaded, will have to experiment.