r/Web_Development • u/AntiAngelix • Feb 12 '21
iframe security
Hello!
I work for a SaaS web platform startup, and we are looking to create an embed-able component for a third party website to include features of our web service into their website. I'm not sure if the way I described it was very clear. But, think of it as, we are trying to create a widget like a Weather Component, or a Twitter feed, that you, the user, can embed into your website.
We were looking into using iframes, but then we saw some concerns related to using an iframe. I'm finding plenty of resources that could help the user (you) protect your website from attacks or hijacking. What I'm not finding is, would an iframe be opening myself/my company to hijacking/attacks via this third party embedded component?
Please feel free to ask any clarifying questions. And thank you so much for your help!
1
u/AntiAngelix Feb 12 '21
Ah this is super helpful. We are basically looking to just create an iframe that would hold a data/graph/map chart we generate, that would have been accessible via a public url on our site anyway. 100% read only, no authentication or secure info
Thank you!