jeena/en.javascript.info
1
0
Fork 0
Code Issues Pull requests Projects Packages Wiki Activity Actions

fix for epub build

Browse source
This commit is contained in:
Ilya Kantor 2018-10-18 12:34:33 +03:00
parent 4c103dc698
commit 758b24ce5c
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
4-frames-and-windows/06-clickjacking/article.md
View file

@ -137,15 +137,20 @@ The header may have 3 values:
`ALLOW-FROM domain` `ALLOW-FROM domain`
: Allow inside a frame if the parent document is from the given domain. : Allow inside a frame if the parent document is from the given domain.
For instance, Twitter uses `X-Frame-Options: SAMEORIGIN`. Here's the result: For instance, Twitter uses `X-Frame-Options: SAMEORIGIN`.
````online
Here's the result:
```html ```html
<iframe src="https://twitter.com"></iframe> <iframe src="https://twitter.com"></iframe>
``` ```
<!-- ebook: prerender/ chrome headless dies and timeouts on this iframe -->
<iframe src="https://twitter.com"></iframe> <iframe src="https://twitter.com"></iframe>
Depending on your browser, the `iframe` above is either empty or alerting you that the browser won't permit that page to be navigating in this way. Depending on your browser, the `iframe` above is either empty or alerting you that the browser won't permit that page to be navigating in this way.
````
## Showing with disabled functionality ## Showing with disabled functionality