[FiloSottile]

Uuuh, hi there! Thanks for the effort you all put into making leaking safer for sources.

Other possible approach: load the landing page everywhere and show it with Javascript when the user clicks their way to it. I think it's an improvement on the iframe without drawbacks. How does it sound?

[lawl]

Hard to verify that there are no ajax shenanigans.

It's a hard problem :/