Monthly Archives: March 2013

HTML5, iFrame Sandbox Security

The recent rise DDoS attacks are using hosting companies to deliver these attacks. Apparently hackers have been exploiting popular hosted content management applications like WordPress, iFrames specifically. If you create an iFrame and reference another site then you are trusting that this site is free of malware, cross site forgery, cross site scripting, clickjacking etc.

HTML5 offers a new security feature called sandboxing. You have 5 options:

Blank – Enforces all sandboxes restrictions

allow-same-orgin – All pages must be from the same site.

allow-top-navigation – Allows the iFrame content to navigate from the containing document.

allow-forms – Allows forms submission

allow-scripts – Allow script execution

<iframe sandbox src="frame1.html"></iframe>
<iframe sandbox="allow-forms allow-same-origin" src="frame1.html"></iframe>


Again it is important to keep in mind that if the browser does not support HTML5 then this attribute will be ignored. Having said that there are javascript libraries (Modernizr) that will allow the sandbox option to function.


WordPress for iOS

I’m not sure who uses WordPress for blogging but if you do and you have a apple product like iPad, iPhone or iPod Touch then I would recommend you try out the WordPress for iOS. If your an iOS developer I would recommend you get the code from the SVN repository. I guess I can point you to the WordPress iOS blog instead of writing about it.

The Admin part is native and good support for both iPhone and iPad devices. The Dashboard is just a Web view of WordPress Admin interface. It needs to be a little more responsive for smaller viewing area.

The published WordPress Blog is all HTML and responsive. It is presented via a web view within the iOS app using the smaller view port layout. If you go to a WordPress Blog via your iPhone or iPad you get the same response.

The settings allows you to add multiple WordPress blogs you are managing.

Contains a Photo feature for selecting photos from your device library or taking new pictures and posting them. This is an excellent feature when your blogging on the road.

I did a blog update while I was on the road using my iPhone 5. I will have to say it was very doable but would have been even better experience on the lap or iPad. Either way managing your WordPress Blogs using your iPhone or iPad is very easy with this application and best of all it is free.

Source Code is available It is stored in the public Trac SCM repository (SVN). In terms of documentation it is like any other open source project. You have the code with comments, forum and defect tracking, that’s about it. I’m sure someday there will be a book out about WordPress from ORA if not already.

It is a subset of the web based dashboard that is implemented.  So you have options for managing Posts, Pages, Comments, Stats (require a plugin) and View Site (Web Admin Page).

Looking at the application I’m interested to know why they chose Native over HTML/5/JAVASCRIPT/CSS.  I know the thin wrapper for hosting in the iTunes would be required.  Other then that the Listview for all of options, editor and Rest communication to the WordPress API is achievable.





HTML 5 Template

Individuals and companies all are trying to think of the next big thing on the Web / Mobile.

Technical individuals and companies should think about services to assist profit, non-profit, companies and individuals. They have the ideas but not the technical knowledge to make it happen.

For example a local charitable lottery has been very popular the last several years. I’m sure they have some template based html site they use to crank out a new version every year. It’s give them the ability to get a new website up and running fast using traditional html non-responsive design.

Now that more people are using their smart phones and tablets they could be missing a huge market.

Making a responsive design application that will render on the mobile phone, tablet, laptop and Desktops is becoming the standard and template generators like HTML5 Initializr / Boilerplate can be used to get you up and running quickly. In the Wall Street journal article I read a tree arborist used HTML 5 Rocks to create his mobile app idea.

I used it to create If you know HTML, CSS and Javascript and you want to learn more about responsive design then you should check out the initializr boilerplate.

The source code for the HTML5 Initialzr is also available for download. Had a quick look at the code. It is a java / servlet, nothing very complicated but you will need an application server supporting java.