This is a new flag for `<iframe sandbox="...">` which will allow a sandboxed document to spawn new windows without forcing the sandboxing flags upon them. This will allow, for example, a third-party advertisement to be safely sandboxed without forcing the same restrictions upon a landing page.

Demo

• https://googlechrome.github.io/samples/allow-popups-to-escape-sandbox/index.html

Documentation

• https://lists.w3.org/Archives/Public/public-whatwg-archive/2015May/0035.html
• https://www.w3.org/Bugs/Public/show_bug.cgi?id=28817
• https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe

Specification

Specification link

Status: Specification being incubated in a Community Group

Status in Chromium

Blink components: Blink

Implementation status: Enabled by default (tracking bug)

Consensus & Standardization

• Firefox: Shipped/Shipping
• Safari: Shipped/Shipping
• Web Developers: Positive

Owner

• mkwst@chromium.org

Last updated on 2021-01-17