If we did not have the security property available to us, the iframe will exist within the same security zone as the rest of the application. This will allow the hacker to write malicious script that can access the parent window and browse through the rest of John's mail. The hacker may also have the ability to run destructive ActiveX controls. The user is now able to generate their own cursor. The look of the existing cursor has been changed to be standard CSS2 compliant.
Developers have a hard time generating reliable focus.
All rights reserved.