javascript - What sites will break my iframe? -
i'm building search site uses iframes display results. aware sites either fail deliver content, or 'break out' of frame. far have identified twitter, facebook , nytimes.
what other big-name frame-busters there?
i'm sure paypal 1 of them. have keep in mind iframes can make appear though user viewing site itself, , not own site.
take example if twitter allowed iframing. malicious hacker sets site twitter in iframe, , login box next it. unsuspecting user thinks need login twitter, puts in username , password, , viola! hacker has login data.
in sense of nytimes it's "don't pretend content" issue.
for these reasons chances of running frame-busting on big name sites high.
Comments
Post a Comment