What is an iframe and what security considerations apply?

An iframe embeds another browsing context inside the current page. It can be used for content such as maps, videos, documents, or isolated applications.

Embedded content introduces security, privacy, performance, and accessibility considerations. Use a meaningful title, restrict capabilities with sandbox when appropriate, define permissions deliberately, and avoid embedding untrusted content with more privileges than it requires.