Update navigations.md

xsleaks · Apr 23, 2024 · 647ed32 · 647ed32
1 parent d0d12dd
commit 647ed32
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/content/docs/attacks/navigations.md b/content/docs/attacks/navigations.md
@@ -71,6 +71,8 @@ The following snippet can be used to detect whether such a navigation has occurr
 var url = 'https://example.org/';
 // Create an outer iframe to measure onload event
 var iframe = document.createElement('iframe');
+// Don't actually download the file to be stealthy
+iframe.sandbox = 'allow-scripts allow-same-origin';
 document.body.appendChild(iframe);
 // Create an inner iframe to test for the download attempt
 iframe.srcdoc = `<iframe src="${url}" ></iframe>`;