[theora] <video/> and cross site scripting policy.

Chris Double chris.double at double.co.nz
Thu Nov 6 17:36:12 PST 2008

On Fri, Nov 7, 2008 at 2:27 PM, Gregory Maxwell <gmaxwell at gmail.com> wrote:
> Forget an IFRAMable page:  someone trying to be a rude hotlinker could
> simply IFRAME directly to the media itself.

Yes, that works fine from Firefox:



More information about the theora mailing list