#iframe沙箱

CSP Allow-list Experiment: A New Approach to Dynamic Domain Authorization via Sandboxed iframes

Deep dive into Simon Willison's CSP Allow-list Experiment: dynamic domain authorization via sandboxed iframes, custom fetch interception, and postMessage communication.