URL Protocol Schemes Allowed

LWS restricts the HTMLObjectElement.data attribute and the src attribute for iframe elements to values that use the http:// and https:// schemes. URL schemes like javascript:// aren't allowed.

See Also