Skip to content

Navigating bfcache isn't guarded by sandboxing #4121

Closed
#6315
Closed
Navigating bfcache isn't guarded by sandboxing#4121
#6315
Labels
security/privacyThere are security or privacy implicationstopic: history

Description

@annevk
annevk
opened on Oct 25, 2018

As far as I can tell the standard as-is doesn't guard a sandboxed <iframe> from navigating the top-level browsing context with history.back() if the previous entry holds a Document object.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    security/privacyThere are security or privacy implicationstopic: history

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions