cmshaw (cmshaw) wrote in suggestions,

Allow inline frames which point to other LJ pages

Allow inline frames which point to other LJ pages

Short, concise description of the idea
[repost: previous attempt was cut off] The <iframe> tag should be allowed in LiveJournal styles when it contains a relative link within LiveJournal, as for example when it appears on the user's calendar page displaying the user's month page.

Full description of the idea
The inline frame (<iframe>) tag, which displays one webpage inside of a defined area in a second webpage, is stripped from LiveJournal styles because it poses a security risk: the framed webpage can contain script which is executed when the first webpage is viewed. However, if the framed webpage is another LiveJournal webpage, this risk is removed, since scripts are not allowed on any LiveJournal pages.

An ordered list of benefits

  • Use of inline frames greatly extends style-building capabilities.
  • An ordered list of problems/issues involved

  • Conditionally stripping <iframe> tags based on URL is more difficult than stripping all <iframe> tags, and may be open to error.
  • An organized list, or a few short paragraphs detailing suggestions for implementation

  • Each <iframe> tag contains an src="URL" attribute. Tags beginning '<iframe src="/' or '<iframe src="../' could be considered safe, and all others removed.
  • For full implementation in styles, relative URLs would need to be provided in the Page classes of S2.
  • Tags: ~ historical
    • Post a new comment


      Anonymous comments are disabled in this journal

      default userpic

      Your reply will be screened

      Your IP address will be recorded