Question

I noticed that all the Facebook applications that running inside an iframe hiding their iframe SRC, instead of the real src there is a “javascript:”””.
How can i do that? I want that my iframe will hide the original src

thanks!

Answer 1

Facebook applications are loaded dynamically, which means the SRC is changed after the HTML is loaded. That is why you can only see javascript:;. The src is not hidden though, it is still there and can be obtained using javascript.

If you are using jQuery, you could use something like this:

<iframe src="javascript:;" id="myframe"></iframe>
<script>
$(document).ready(function() {
    $('#myframe').attr('src', 'http://facebook.com');
});
</script>

With this, the iframe will have javascript:; as src in the HTML, but will load facebook.com