mirror of
https://github.com/kiwix/libkiwix.git
synced 2025-08-03 02:06:05 -04:00

This prevents scripts running inside an iframe from inadvertently manipulating the top browsing context. However a malicious script could still remove the sandboxing imposed on it (because the combination of "allow-same-origin" and "allow-scripts" is vulnerable).