Hacker News new | ask | show | jobs
by politician 2958 days ago
I'd like to see the browser vendors move to allow the source page to carve out and delegate rendering a single region of pixels per child frame -- preventing other frames, including the source page, rendering into that region or receiving events originating in that region. Finally, child frames should not be allowed to sub-partition their allocation -- there's no defensible need for this except clickjacking.

This would neatly solve this problem with the low cost of making folks who want to implement modal popovers have to do some proper scene management in their pages.

It should always be possible for the end-user to view a colored overlay of their screen and see exactly which origins are operating which regions of the screen.

1 comments

> to allow the source page to carve out

How would that help? If I have malicious site, I just wouldn't use that feature.