browsersec
browsersec copied to clipboard
<object> element not considered
Many of the security considerations for the <embed>, <iframe>, <img>,
<applet> and <script> elements are also relevant to the <object> element,
which is not discussed in this document.
Original issue reported on code.google.com by [email protected] on 17 Jul 2009 at 5:57
<OBJECT> is discussed in a number of places, though explicit test results are
indeed
given only for <EMBED> and <APPLET>, with the assumption that <OBJECT> behaves
in a
manner similar to <EMBED>. Are you aware of any cases to the contrary? Either
way, I
will try to clarify.
Original comment by [email protected] on 28 Jul 2009 at 10:03