A and B are two frames in a browser, loaded from different origins. Why is it a reasonable security policy to allow A to navigate B to another…

A and B are two frames in a browser, loaded from different origins. Why is it a reasonable security policy to allow A to navigate B to another origin based only on whether the display area of A contains the display area of B and A has control over that area?

From the Combined Bank Assistant Programmer (CSE) June 2023 – Written exam, question 6 of 10.

More from this paper