Today’s web applications are put together a mesh up a new experiences into one experience. Think Twitter widgets showing the latest tweets about a product. Or Facebook comments discussing an article. Or even just integrated web pages through an IFRAME element. These experiences can increase security breaches to your site.
To your rescue there’s a new kid on the block to help you out: The HTML5 Sandbox. Dariusz Parys in this article at first quickly reviews IFRAME element issues which have in them valid security concerns hadn’t been properly addressed by a standards body for a long time. Without a clear W3C standard, it was essential to somehow secure the host from framed content. For example, Microsoft provided a proprietary implementation of IFRAME security in Internet Explorer 8.
The author has also placed a demo to help the users play around with the HTML sandbox. They can download a copy of this demo from Github. To enable the form post-back demo, they have to just open the project folder in WebMatrix and start the project from there.
To know more about securing web and to read this complete article visit: http://www.htmlgoodies.com/html5/client/how-to-safeguard-your-site-with-html5-sandbox.html#fbid=lz3kcncNc9W