Issue metadata
Sign in to add a comment
|
Disable content-disposition (forced file download) in iframes. May be add "allow-content-disposition" to sandbox attribute
Reported by
vse...@oath.com,
Nov 10 2017
|
||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36 Steps to reproduce the problem: In the advertising world the most common issue seen is malware injected on user's computer through malicious ads. Hence, to restrict what an ad can do on a page, iframe sandbox facilitates good controls and a very helpful enhancement to have would be an attribute that can disallow forced file downloads. What is the expected behavior? With What went wrong? This is an enhancement request for iframe sandbox. Did this work before? N/A Chrome version: 61.0.3163.100 Channel: n/a OS Version: OS X 10.12.6 Flash Version:
,
Nov 10 2017
Thanks for the report. I do think this would be a good idea and we already have a bug on file for it.
,
Nov 10 2017
|
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by vse...@oath.com
, Nov 10 2017