fabrixxm/friendika-addons — comment on commit 255685c17698530da9e252e013c4ef1f1b048b7d
File:  line 0
By friendika:

I saw the eralier email but can't find it now ... anyway to answer the question iframes are preferable to allowing cross-site scripting. The latter is OK on a single-user site but it causes huge security issues on a multi-user site.