Hacker News new | past | comments | ask | show | jobs | submit login

Using the <iframe> "sandbox" property. At least stops things like alert('hey') and a full-page redirect



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: