Hacker News Reader

> Iframe is a security trainwreck

That seems like it should be relatively fixable. For example, iframes could be visible, clearly marked (including the URL), and sandboxed like any separate page. One could go further by insisting that they are display-only and can only be displayed rather than interacted with. Then an iframe would basically be a glorified jpg with a URL.

View on HN

Then you need to kiss embedded video players and login/auth widgets goodbye, which are like 95%[1] of what iframes are used for outside ads.

But if you just want to embed completely static article, I suppose it could work, but then there’s no incentive for anyone to allow them.

[1] Yes, I pulled that number out of my ____.

"Deep Rectal Extraction"

Reply on news.ycombinator.com