CODEWITHSUNDEEP
javascriptiframe
Franz Payer
Franz Payer

Reputation: 4137

Keeping pages inside an iframe

I am trying to put a website inside an iframe, but this code on the site keeps changing the window of the page. Is there anyway I can get around this? Or better yet, can I disable javascript in an iframe?

if(top!=self){
  if(top.location)
    top.location=self.location;
  else
    top.location='http://example.com/not_subframe.html';
}

Upvotes: 0

Views: 753

Answers (5)

gertas
gertas

Reputation: 17145

Yes it is possible, there are several methods of anti-frame busting including disabling JS in a frame (sandboxing, designMode). All described in Limitations of OWASP:Defending_with_Frame_Breaking_Scripts.

Generally use it only with intranet or restricted access site. If you expose site publicly with such tricks you may expect blacklisting by Google or others.

Upvotes: 1

Michael Shopsin
Michael Shopsin

Reputation: 2138

iFrames have a variety of security features to try to block what you're doing.

Upvotes: 1

Uwe Keim
Uwe Keim

Reputation: 40736

You can only access the content of one frame from within another frame if both frames are from the same domain.

Otherwise this would be an XSS issue which is therefore forbidden by a browser.

Upvotes: 2

Diodeus - James MacFarlane
Diodeus - James MacFarlane

Reputation: 114377

Web pages cannot disable JavaScript, if they could, it would be mayhem.

Upvotes: 1

keithjgrant
keithjgrant

Reputation: 12749

Nope, can't be done. Not to mention it's usually a bad practice.

Upvotes: 1

Related Questions