Financial-Times / n-ui

❌ DEPRECATED Server, build and client side bootstrapping for FT.com's user-facing applications.
7 stars 5 forks source link

Add iFrame buster #562

Open wheresrhys opened 7 years ago

wheresrhys commented 7 years ago

Just noticed this snippet on hsbc:

<script language="javascript" type="text/javascript">
if (top != self)
{
top.location=self.location;
}
</script>

We should do something similar. Will need to allow opting out for error pages and other iframed pages - @paddyo, you were working on some were you not? Which app and urls?

sjparkinson commented 7 years ago

Came across this answer many years ago, might be useful here.

https://stackoverflow.com/questions/958997/frame-buster-buster-buster-code-needed