Are you prevent hidden frame to popp up dialogs with alert(), bogus protocols in iframe srcs, etc?
Do you prevent the hidden frame from popping up dialogs with alert(), bogus protocols in iframe srcs, etc?