
cross domain
We're developing an extension. We found that iFrame inside the extension, even cross-domain has full access.
Can we restrict access by iFrame if it's on a separate domain?
We're developing an extension. We found that iFrame inside the extension, even cross-domain has full access.
Can we restrict access by iFrame if it's on a separate domain?