-
davidyarham If you're allowing user content, particularly JS, you've got two options: 1) inject code github.com/jsbin/jsbin/wiki/Best-practices-for-building-your-own-live-paste-bin#live-dynamic-generated-iframe-needs-blocking-code-removed 2) generate an AST and remove functions.On twitter.com
Mood 0