Home/ Questions/Q 88747
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T22:36:30+00:00

Some websites have code to break out of IFRAME enclosures, meaning that if a

  • 0

Some websites have code to ‘break out’ of IFRAME enclosures, meaning that if a page A is loaded as an IFRAME inside an parent page P some Javascript in A redirects the outer window to A.

Typically this Javascript looks something like this:

<script type='text/javascript'>   if (top.location.href != self.location.href)      top.location.href = self.location.href; </script>

My question is: As the author of the parent page P and not being the author of the inner page A, how can I prevent A from doing this break-out?

P.S. It seems to me like it ought to be a cross-site security violation, but it isn’t.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Try using the onbeforeunload property, which will let the user choose whether he wants to navigate away from the page.

    Example: https://developer.mozilla.org/en-US/docs/Web/API/Window.onbeforeunload

    In HTML5 you can use sandbox property. Please see Pankrat’s answer below. http://www.html5rocks.com/en/tutorials/security/sandboxed-iframes/

    • 0