Question

i have set up a demo which use iframe to include an target webpage for people to add some widgets on it,

but some website has script to detect if it is in iframe,

and if true, they use parent.window.location to redirect the parent’s url,

so how can i disable this behavior?

or can you guys tell me any other ways to do it

Answer 1

You can disable scripting at browsers by setting designMode="On" at the IFrame element. This doesn’t work in Chrome, though.

There’s no reliabel way to circumvent frame busting scripts. The website maintainer can send the X-Frame-Options: deny header, which causes most recent browsers to refuse loading the content in a frame.