iframe[sandbox] attribute

Category: Miscellaneous
Type: New or changed feature
Status: Enabled by default (Chrome 19)
Intent stage: None

Summary

Method of running external site pages with reduced privileges (i.e. no JavaScript) in iframes (<iframe sandbox="allow-same-origin allow-forms" src="..."></iframe>)

Standards & signals

Specification: http://whatwg.org/html#attr-iframe-sandbox
Firefox: Shipped/Shipping
Safari: Shipped/Shipping
Web developers: Strongly positive

Docs: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox

View on chromestatus.com