All the articles with the tag "iframe".
Practical iframe security: what actually goes wrong and how to lock things down without breaking your app.