Hacker News Reader

The problem is the implementation, not the feature.

The postMessage API provides a safer way for Windows/Tabs to communicate.

https://developer.mozilla.org/en-US/docs/Web/API/Window/post...

Given that most implementation are flawed, and given the limited utility of this "feature", and given the inherent desire to sandbox thing on a browser, I would say the problem is the mindset of the developers who keep adding stuff that ends up exploited.

Reply on news.ycombinator.com