zachleat’s Twitter Archive—№ 4,978

Both iOS and Android set iframe dimensions to the size of their content (even cross domain). I wonder if there are security implications.