Sandbox

sandbox attribute in iframe

• treat the content as being from a unique origin
• block form submission
• block script execution
• disable APIs
• prevent links from targeting other browsing contexts
• prevent content from using plugins (through <embed>, <object>, <applet>, or other)
• prevent the content from navigating its top-level browsing context
• block automatically triggered features (such as automatically playing a video or automatically focusing a form control)

References

• Sandbox (computer security)
  • A sandbox is implemented by executing the software in a restricted operating system environment, thus controlling the resources.
• google/sandboxed-api: Generates sandboxes for C/C++ libraries automatically