Topic Hub

Security

/ 11 min read

IFrames, CORS, and postMessage: Why This Still Feels Broken

Most developers think CORS is the reason iframe communication fails. Usually it isn't. The real problem is that cross-origin embedding and cross-origin scripting are different things.

Read article