Hacker Newsnew | past | comments | ask | show | jobs | submit | incognito92735's commentslogin

> Ads that redirect the parent frame.

Putting the ad in an iframe without the allow-top-navigation[0] sandbox permission could prevent that. Or if the ad naturally consists of an iframe then a browser extension could intercept the iframe load and add the equivalent CSP rule[1]. Or google could do that themselves. I think they would still be allowed to open in a new tab.

[0] https://developer.mozilla.org/en-US/docs/Web/HTML/Element/if... [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: