Comment by ccnafr

No, you're right. Portal is effectively iframe without all the security protections.