Browsers are not ready for client-side mash-up??
Hi
I've tried to combine rendered HTML pages that I often visit in a single start page of mine and I didn't like to make this using some 3rd part server.
I want my browser to do this simple job.
there are 2 ways intuitively seen for it:
1). use <IFRAME> html tag;
2). use JavaScript to load and inject the HTML snippet.
both are compromised! IFRAME is vulnerable to redirects (the whole page gets redirected). And the JavaScript's loadding is refused by browsers because of XSS issues!
Your comments?
