The iframe Element src and sandbox
Embed third-party pages and restrict their capabilities.
What is an iframe?
The <iframe> element embeds another HTML document within the current page. Each iframe has its own browsing context, DOM, and JavaScript scope. Content inside an iframe cannot access the parent page's DOM without explicit permission.
Basic iframe Usage
Set the src attribute to the URL to embed: <iframe src="https://example.com" width="800" height="600">. The iframe creates a new browsing context. Title attribute is required for accessibility: title="Embedded map".
All lessons in this course
- The iframe Element src and sandbox
- iframe Security Clickjacking and X-Frame-Options
- The embed and object Elements
- Lazy Loading iframes