Is It Safe to Host HTML That Runs Its Own JavaScript?
ShareMyPage hosts arbitrary HTML with JavaScript, assuming every page is hostile. It sandboxes each page in an iframe without same-origin access and serves content from a separate cookieless origin, ensuring scripts cann…