2 posts
security
Embedding a login-gated app in an iframe (and what breaks)4 min readNotes on the handful of things that actually block iframe embedding, and the fixes for each — grown out of a small POC tool.postMessage doesn't reach a native WebView host3 min readWhy window.postMessage silently fails from inside an Android/iOS WebView, and the two real bridges that replace it.