Inner browsers should not access top level or parent window about chromeless

[lloyd]

marcio, do we address this in commit e98696a ?

[taboca]

No, the case we fixed iframe busting was the fork ( just landed it here https://github.com/taboca/chromeless/tree/21f11fd56bea4db87c290eb8ae44a6c16210c4ce ) work I did using XUL-based browser implementation, but using code taken from the using the XBL-based tabbrowser implementation. It also allows history controls ( back, forward, stop, reload ) it also allows the history state recover, for example, when one clicks back, the scrollbar of the prior page is placed properly in the saved state, it also allowed us to test the concept and API definitions for progress listeners, for example to monitor page progress of loading.

[lloyd]

marcio, if you're content with fd1db1a, we can close this issue

[lloyd]

closing this issue. If we make a change which breaks our anti-framebusting stuff, or we find a page which can still bust, then we should open a new issue.