Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Navigating bfcache isn't guarded by sandboxing #4121

Closed
annevk opened this issue Oct 25, 2018 · 0 comments · Fixed by #6315
Closed

Navigating bfcache isn't guarded by sandboxing #4121

annevk opened this issue Oct 25, 2018 · 0 comments · Fixed by #6315
Labels
security/privacy There are security or privacy implications topic: history

Comments

@annevk
Copy link
Member

annevk commented Oct 25, 2018

As far as I can tell the standard as-is doesn't guard a sandboxed <iframe> from navigating the top-level browsing context with history.back() if the previous entry holds a Document object.
@annevk annevk added security/privacy There are security or privacy implications topic: history labels Oct 25, 2018
@domenic domenic mentioned this issue Mar 4, 2022
Merged
8 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security/privacy There are security or privacy implications topic: history
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Navigation and session history rewrite whatwg/html
1 participant
@annevk