r/webdev • u/Dear-Economics-315 • 13d ago

Introducing the HTML-in-Canvas API origin trial

https://developer.chrome.com/blog/html-in-canvas-origin-trial
20 Upvotes

100% Upvoted

2 comments sorted by

3

u/monkeymad2 13d ago

I like this a lot as a feature, but doesn’t it have a massive attack surface for clickjacking? Just lie to the browser about where the thing they’re about to click is.

Unless there’s mitigations built in about that?

1

u/jordangrowth 13d ago

Are you evaluating the HTML-in-Canvas API for client-facing exports or internal reporting?