Advanced
- CORS applies. If blocked, set a proxy below you control.
- JavaScript from target is stripped. Links are rewritten to stay inside viewer.
Security notes
- Viewer runs in sandboxed iframe.
- Inline event handlers (onclick etc.) removed.
- Potentially dangerous tags stripped: script, iframe, object, embed, link[rel=preload|modulepreload], base.
- Styles allowed inline; external CSS blocked.