[theora] <video/> and cross site scripting policy.

Chris Double chris.double at double.co.nz
Thu Nov 6 17:36:12 PST 2008


On Fri, Nov 7, 2008 at 2:27 PM, Gregory Maxwell <gmaxwell at gmail.com> wrote:
> Forget an IFRAMable page:  someone trying to be a rude hotlinker could
> simply IFRAME directly to the media itself.

Yes, that works fine from Firefox:

http://www.double.co.nz/video_test/iframe.html

Chris
-- 
http://www.bluishcoder.co.nz


More information about the theora mailing list