mirror of
https://github.com/kiwix/libkiwix.git
synced 2025-06-26 10:11:30 +00:00
This prevents scripts running inside an iframe from inadvertently manipulating the top browsing context. However a malicious script could still remove the sandboxing imposed on it (because the combination of "allow-same-origin" and "allow-scripts" is vulnerable).