#dev 2021-06-19

2021-06-19 UTC

Zegnat I have not touched that part for a bit, but part of me feels like window.parent lets your JS break out of srcdoc. So you willl still want to do xss protection being a client. Unless browsers ship stronger protections now than they used too