Sandboxed iframes
Widely available since 2018-01-29
The sandbox
attribute for the <iframe>
HTML element sets many security restrictions on the iframe, such as preventing form submissions or opening modal dialogs. Optional allow-
values relax specific restrictions.
Learning resources on MDN
Browser support (view on caniuse.com)
- Chrome 5 Released on 2010-05-25
- Chrome Android 18 Released on 2012-06-27
- Edge 12 Released on 2015-07-29
- Firefox 17 Released on 2012-11-20
- Firefox for Android 17 Released on 2012-11-20
- Safari 5 Released on 2010-06-07
- Safari on iOS 4 Released on 2010-06-21
Specifications
- HTML Standard (#attr-iframe-sandbox), from HTML Workstream (WHATWG).
- The Storage Access API (#sandboxing-storage-access), from Privacy Community Group (W3C).