Restricting my site to use other domains url in iframe

Question

How I restricting my site to use other domains url in iframe.

Priti Kumari · Answer

My Site Scene is like this: when i load my web page then my url is like: http://mydomainname/page/mypage.aspx in mypage.aspx one iframe, in this iframe my another page load dynamicaly according to user click on some specific link. so my parent url http://mydomainname/page/mypage.aspx not change but my iframe page is change every time according to user click. In above condition when i add another site url to my iframe src then its load another site to my web site iframe.so i want to restrict this .please help me......

Priti Kumari · Answer

Its change by hacker....so i want to restrict it...

Priti Kumari · Answer

PFA....It contain screen shoot of my problem

Vivek Arya · Answer

Priti , does it make any sense in changing values in Developer Tool. ?

Ashish · Answer

If you want to maintain it on server side them this one :- you can do this by inspecting the referer property. Request.UrlReferrer See that it contains the domain that you want to allow. This property is available when an embedder puts your page in the IFRAME's SRC attribute and the page loads for the first time

Ashish · Answer

If you want to restrict on client side: if (window.top.location.host != "mydomainname" ) { document.body.innerHTML = "Access is not allowed" ; } ADD above javascript in your code and tell me .....

Priti Kumari · Answer

r u understand my problem?

Priti Kumari · Answer

When my site is in running mode and i press F12 and Change iframe src value to this url http://www.c-sharpcorner.com/ then my site load this site in my web site iframe....and i want to restrict fro security purpose.

Ashish · Answer

Case 1: My Site Scene is like this: when i load my web page then my url is like: http://mydomainname/page/mypage.aspx in mypage.aspx one iframe, in this iframe my another page load dynamicaly according to user click on some specific link. so my parent url http://mydomainname/page/mypage.aspx not change but my iframe page is change every time according to user click. Case 2: In above condition when i add another site url to my iframe src then its load another site to my web site iframe.so i want to restrict this . Q1) Is your Case 1 working ? Q2) When you want to restrict another site url in your Iframe, then why are you setting src to that site. ? Because its browser feature to show the requested page in Iframe.

Priti Kumari · Answer

yes sir......its my requirement.......

Priti Kumari · Answer

i want to restrict another domain site to add in my web site iframe src.I am trying this from three days but i am not foun d soluntion for this

Ashish · Answer

So, By your explanation i conclude that your requirement is that your iframe always use mydomainname and it should not use other domain. Am i right? Working on this give me some time.

Ashish · Answer

I will appreciate , if you elaborate your scenario more specifically . This question is seeming intresting so please provide with some more detail. i want to solve this. Thanks, Ashish

Priti Kumari · Answer

I want to restrict iframe for specfic domain pages.

Ashish · Answer

Attribute value "> Use attribute value allow-same-origin . And for your more information and more knowledge about this check this link: http://javascript.info/tutorial/same-origin-security-policy

Restricting my site to use other domains url in iframe

Answers (15)