Iframe anti-plug-in and strong plug-in (2)

 
DREAM Light

Html "target = _ blank> iframe anti-insertion and strong insertion (1) describes the two methods available on the market to defend against iframe attacks, and the corresponding abnormal breakthrough methods.

It seems that the "victim" has been overwhelmed. Let's take a look at these two methods:

They can all determine that they have been XX, But how do they do it?

Method 1: Please go out, sir.

Method 2: Proceed, comrade!

However, this gentleman also said, "I will not go out !"

Because the "victim" and the gentleman are not a family, it seems that the other party is helpless by command-same-origin strategy!

But in fact, the "please go out" method is obviously aimed at the gentleman and the villain, so Monyer teaches you a good way-"beat out with a single stick !"

<Script>
Window. onload = function (){
If (top! = Self ){
Var f = document. createElement ("form ");
F. action = location;
F.tar get = "_ parent ";
Document. body. appendChild (f );
F. submit ();
}
};
</Script>

At present, I have not found a breakthrough method, so at least it is more violent than the above two methods!

Monyer!