Really fix #3738 by only processing iframe src attributes during parsing.

This commit is contained in:
Josh Matthews 2014-10-23 17:25:39 -04:00
parent 012a80cc18
commit 225ec3ed4e
8 changed files with 20 additions and 7 deletions

View file

@ -0,0 +1,2 @@
<iframe id="whee"></iframe>
<script>document.getElementById('whee').src = "http://google.com"</script>