Tuesday, March 29, 2011

Re: [twitter-dev] Oauth from iFrame

Hi Trevor,

We make small security tweaks all the time -- IFRAMEs make it very difficult for the end user to verify the authenticity of twitter.com while they are entering their login credentials -- the user should always be able to clearly see the URL in the browser's standard representation of a "location bar."

@episod - Taylor Singletary


On Tue, Mar 29, 2011 at 4:00 AM, Trevor Dean <trevordean@gmail.com> wrote:
I am launching the twitter authorization page from my site which is in an iFrame, this used to work but now the authorization page won't load inside the iFrame.  Has something changed?  I posted this yesterday and haven't received any response, can someone from twitter weigh in on this?


Trevor

--
Twitter developer documentation and resources: http://dev.twitter.com/doc
API updates via Twitter: http://twitter.com/twitterapi
Issues/Enhancements Tracker: http://code.google.com/p/twitter-api/issues/list
Change your membership to this group: http://groups.google.com/group/twitter-development-talk

--
Twitter developer documentation and resources: http://dev.twitter.com/doc
API updates via Twitter: http://twitter.com/twitterapi
Issues/Enhancements Tracker: http://code.google.com/p/twitter-api/issues/list
Change your membership to this group: http://groups.google.com/group/twitter-development-talk

No comments:

Post a Comment