3 replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
source | link

I want to render user uploaded HTML (consisting of possibly many files with images, custom css, custom js, all uploaded in a zip file) for preview purpose. The user that submits the html will be the only one to access it.

I want the user's HTML to be isolated from the rest of my website (no access to javascript, no css inheritance, no access to the server's other files).

I read some information about iframe in another questionanother question, and I am considering the use of sandboxed iframe.

I wonder if it's secured enough, or if there are better options.

I want to render user uploaded HTML (consisting of possibly many files with images, custom css, custom js, all uploaded in a zip file) for preview purpose. The user that submits the html will be the only one to access it.

I want the user's HTML to be isolated from the rest of my website (no access to javascript, no css inheritance, no access to the server's other files).

I read some information about iframe in another question, and I am considering the use of sandboxed iframe.

I wonder if it's secured enough, or if there are better options.

I want to render user uploaded HTML (consisting of possibly many files with images, custom css, custom js, all uploaded in a zip file) for preview purpose. The user that submits the html will be the only one to access it.

I want the user's HTML to be isolated from the rest of my website (no access to javascript, no css inheritance, no access to the server's other files).

I read some information about iframe in another question, and I am considering the use of sandboxed iframe.

I wonder if it's secured enough, or if there are better options.

2 cleaned up grammer and links, removed gratutitous thanks.
source | link

I want otto render a user uploaded htmlHTML (possiblyconsisting of possibly many files with images, custom css, custom js, all uploaded in a zip filesfile) for preview purpose. The user that submitsubmits the html will be the only one to access it.

I want the user htmluser's HTML to be isolated from the rest of my website (no access to javascript, no css inheritance, no access to the server's other files).

I read some information about iframe on this site (in http://security.stackexchange.com/a/15193/30131another question ), and I want toam considering the use a sandboxed iframeof (http://www.w3schools.com/tags/att_iframe_sandbox.aspsandboxed iframe).

I wonder if it's secured enough, or if there are better options.

Thanks

I want ot render a user uploaded html (possibly many files with images, custom css, custom js, all uploaded in a zip files) for preview purpose. The user that submit the html will be the only one to access it.

I want the user html to be isolated from the rest of my website (no access to javascript, no css inheritance, no access to files).

I read some information about iframe on this site ( http://security.stackexchange.com/a/15193/30131 ), and I want to use a sandboxed iframe (http://www.w3schools.com/tags/att_iframe_sandbox.asp) I wonder if it's secured enough, or if there are better options.

Thanks

I want to render user uploaded HTML (consisting of possibly many files with images, custom css, custom js, all uploaded in a zip file) for preview purpose. The user that submits the html will be the only one to access it.

I want the user's HTML to be isolated from the rest of my website (no access to javascript, no css inheritance, no access to the server's other files).

I read some information about iframe in another question, and I am considering the use of sandboxed iframe.

I wonder if it's secured enough, or if there are better options.

1
source | link

Sandboxing user input html

I want ot render a user uploaded html (possibly many files with images, custom css, custom js, all uploaded in a zip files) for preview purpose. The user that submit the html will be the only one to access it.

I want the user html to be isolated from the rest of my website (no access to javascript, no css inheritance, no access to files).

I read some information about iframe on this site ( http://security.stackexchange.com/a/15193/30131 ), and I want to use a sandboxed iframe (http://www.w3schools.com/tags/att_iframe_sandbox.asp) I wonder if it's secured enough, or if there are better options.

Thanks