Is scripting enabled in these PiP windows?

[domenic]

For example would this work?

const script = pipWindow.document.createElement("script");
script.textContent = "document.body.append('hello');";
pipWindow.document.body.append(script);

[steimelchrome]

Yes, scripting is enabled in the PiP windows. We had originally planned to disable scripting, but we discussed with some security folks and determined that disabling scripting in the PiP window didn't actually provide security benefit, so we will allow it