Y
Hacker News
new
|
ask
|
show
|
jobs
by
bugmen0t
2613 days ago
You likely want a separate domain indeed. See
https://security.googleblog.com/2012/08/content-hosting-for-...
1 comments
1mbsite
2613 days ago
Sites like Tumblr do it and are fine, and they allow custom HTML and JS also. Cookies are HTTP only and inaccessible with JavaScript. And framing is blocked.
link