iframe

[CEReactions, ReflectURL] attribute USVString src; [CEReactions] attribute (TrustedHTML or DOMString) srcdoc; [CEReactions, Reflect] attribute DOMString name; [SameObject, PutForwards=value, Reflect] readonly attribute DOMTokenList sandbox; [CEReactions, Reflect] attribute DOMString allow; [CEReactions, Reflect] attribute boolean allowFullscreen; [CEReactions, Reflect] attribute DOMString width; [CEReactions, Reflect] attribute DOMString height; [CEReactions] attribute DOMString referrerPolicy; [CEReactions] attribute DOMString loading; readonly attribute Document? contentDocument; readonly attribute WindowProxy? contentWindow; Document? getSVGDocument(); I got my own magazine! After much effort, I've finally found a publisher, and so now I have my own magazine! Isn't that awesome?! The first issue will come out in September, and we have articles about getting food, and about getting in boxes, it's going to be great! Thirteen minutes ago, ch wrote: did you get a cover picture yet?" Five minutes ago, ch wrote: hey that's earl's table. you should get earl&me on the next cover." Notice the way that quotes have to be escaped (otherwise the srcdoc attribute would end prematurely), and the way raw ampersands (e.g. in URLs or in prose) mentioned in the sandboxed content have to be doubly escaped — once so that the ampersand is preserved when originally parsing the srcdoc attribute, and once more to prevent the ampersand from being misinterpreted when parsing the sandboxed content. Furthermore, notice that since the DOCTYPE is optional in iframe srcdoc documents , and the html , head , and body elements have optional start and end tags , and the title element is also optional in iframe srcdoc documents , the markup in a srcdoc attribute can be relatively succinct despite representing an entire document, since only the contents of the body element need appear literally in the syntax. The other elements are still present, but only by implication. In the HTML syntax , authors need only remember to use U+0022 QUOTATION MARK characters (") to wrap the attribute contents and then to escape all U+0026 AMPERSAND (&) and U+0022 QUOTATION MARK (") characters, and to specify the sandbox attribute, to ensure safe embedding of content. (And remember to escape ampersands before quotation marks, to ensure quotation marks become " and not ".) In XML the U+003C LESS-THAN SIGN character ( HTML element represents a nested browsing context, embedding another HTML page into the current one.") The sandbox attribute, when specified, enables a set of extra restrictions on any content hosted by the iframe . Its value must be an unordered set of unique space-separated tokens that are ASCII case-insensitive . The allowed values are: