ParentFull threadhackcasual·IFrames are over-permissioned. For example an iFrame can exfiltrate data to a 3rd partyView on HN