Given that iFrames are used in many common exploits, I'd like to conditionally disable iFrames except for sites that require it such as GMailGMail, or MasterCard SecureCodeMasterCard SecureCode.
I also suspect the <object>
tag has related functionality.
- Is there any way to conditionally block the usage of iFrames (and/or
<object>
) on the client side, perhaps in a similar way a pop up blocker works?