Fixes https://github.com/readium/readium-js-viewer/issues/356 window.parent, window.top, window.frameElement.ownerDocument.defaultView are possible accessors into the application scripted environment when the iframe(s) that host EPUB content documents are not propertly sandboxed (by using the HTML5 sandbox attribute or HTTP / URI schemes that enforce cross-domain/origin restrictions). window.top and window.frameElement are read-only in all browsers, only window.parent can be patched in Firefox and Chrome (not Internet Explorer)...in other words, this technique is not reliable enough to justify its use. See discussion: https://docs.google.com/document/d/1GK1aVsrTv23WroBWMX-XiwYtXbq6huW_pK8QXRaY6XQ
Fixes https://github.com/readium/readium-js-viewer/issues/356
window.parent, window.top, window.frameElement.ownerDocument.defaultView are possible accessors into the application scripted environment when the iframe(s) that host EPUB content documents are not propertly sandboxed (by using the HTML5 sandbox attribute or HTTP / URI schemes that enforce cross-domain/origin restrictions).
window.top and window.frameElement are read-only in all browsers, only window.parent can be patched in Firefox and Chrome (not Internet Explorer)...in other words, this technique is not reliable enough to justify its use.
See discussion: https://docs.google.com/document/d/1GK1aVsrTv23WroBWMX-XiwYtXbq6huW_pK8QXRaY6XQ

kivuto/readium-js,bibliolabs/readium-js,ravn-no/readium-js,looknear/readium-js,looknear/readium-js,readium/readium-js,kivuto/readium-js,readium/readium-js,bibliolabs/readium-js,ravn-no/readium-js