Vue version

3.2.45

Link to minimal reproduction

https://sfc.vuejs.org/#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

Steps to reproduce

iframe1->iframe2->iframe3

What is expected?

iframe3 renders normally

What is actually happening?

iframe3 rendering exceptions.

System Info

No response

Any additional comments?

No response

Infinite recursion is prevented. Any frame that attempts to assign as its SRC a URL used by any of its ancestors is treated as if it has no SRC URL at all (basically a blank frame). This doesn't prevent all malicious documents, but it eliminates a troublesome class of them.

see https://www.w3.org/TR/WD-frames-970331