Remove alert(), confirm(), and prompt for cross origin iframes - Chrome Platform Status

Chrome allows iframes to trigger Javascript dialogs, it shows “<URL> says ...” when the iframe is the same origin as the top frame, and “An embedded page on this page says...” when the iframe is cross-origin. The current UX is confusing, and has previously led to spoofs where sites pretend the messa…

Link Rot

Source: Remove alert(), confirm(), and prompt f…
Actions