Comment by rebane2001
2 hours ago
> What specifically does Google Docs do that requires it?
Google wants documents to be embeddable on external sites.
> How do you frame the victim site without iframes?
You don't, you use it in a different scenario. For example if you have HTML injection, but its fairly limited due to strict CSP.
No comments yet
Contribute on Hacker News ↗