Hacker News new | ask | show | jobs
by 1mbsite 2605 days ago
Sites like Tumblr do it and are fine, and they allow custom HTML and JS also. Cookies are HTTP only and inaccessible with JavaScript. And framing is blocked.