search

goog.dom.iframe.BLANK_SOURCE_URL

Alias for

Safe source for a blank iframe.

Intentionally not about:blank for IE, which gives mixed content warnings in IE6 over HTTPS. Using 'about:blank' for all other browsers to support Content Security Policy (CSP). According to http://www.w3.org/TR/CSP/ CSP does not allow inline javascript by default.