← Back to Master.dev
Courses Learn Become a Member Guest Writing
RSS
Blog
Author Archive for

Keshav Malik

Post Thumbnail for Testing an iframe’s postMessage Handler
iframesJavaScriptpostMessageSecurity

Testing an iframe’s postMessage Handler

By Keshav Malik on Oct 07, 2026

There are some real complexities using iframes and the postMessage API for communication between a widget and its parent. Security vulnerabilities like cross-origin scripting risks being one.

Author

Keshav Malik
Keshav Malik
LinkedIn
I’m Keshav, a senior product security engineer at LinkedIn. My work centers on software supply chain security, design review, and security automation.
Website GitHub Profile LinkedIn Profile
$966,000

Master.dev donates to open source projects through thanks.dev and Open Collective, as well as donates to non-profits like The Last Mile, Annie Canons, and Vets Who Code.

  • Courses
  • Learn
  • Teachers
  • Guides
  • Blog
  • FAQ
  • Login
  • Join Now
  • RSS
X LinkedIn Facebook Instagram RSS
Master.dev App on the Apple App Store Master.dev App on Google Play
Contact: support@master.dev
Master.dev is proudly made in Minneapolis, MN
©2026 Master.dev · Terms of Service · Privacy Policy