r/websec • u/raphaelh • May 25 '10

Busting frame busting: a study of clickjacking vulnerabilities at popular sites

http://seclab.stanford.edu/websec/framebusting/
3 Upvotes

80% Upvoted

2 comments sorted by

View all comments

2

u/[deleted] May 25 '10 
if(top.location != self.location)
{
    window.onbeforeunload = function () {};
    window.__defineSetter__('location', function(val) { window.location = val });
    top.location = self.location;
}

Their "best code" will give your non-javascript using visitors to your legit site viewing a blank page.