iframes: A look in to the black heart of the browsers
summary
Built a live-preview editor called JS Bin that injects HTML into dynamic iframes and relies on document.close for load events, shows that an iframe window only exists once inserted and is destroyed when removed, and uses injected noops to prevent alerts and removed autofocus to stop focus stealing. Practical hacks include Comet streaming via hidden iframes, a remote console using postMessage and iframe fallbacks, cross‑domain bootstrapping via window.name, phone keyboard workarounds, and horror stories like the Samsung S3 remote‑wipe and iOS MP3 autoplay.
AI-written summary · about
chapters (9)
- 0:00Introduction to iframes
- 2:03History of frames
- 4:15Iframe hacks and Comet
- 7:21Dynamic iframe management
- 11:05Live rendering techniques
- 15:43Advanced iframe communication
- 18:45Cross-domain and messaging
- 23:25Manifests and new hacks
- 27:45Modern iframe features
