Restricting my site to use other domains url in iframe

Priti Kumari

12y2.5kLearn iOS Programming

How I restricting my site to use other domains url in iframe.

15 Replies

Know the answer? Post it — somebody with the same question will find it here.

Priti Kumari12y ago
Its change by hacker....so i want to restrict it...
0
Priti Kumari12y ago
PFA....It contain screen shoot of my problem
0
Vivek Arya12y ago
Priti , does it make any sense in changing values in Developer Tool. ?
0
Ashish12y ago
If you want to maintain it on server side them this one :-

you can do this by inspecting the referer property.

Request.UrlReferrer

See that it contains the domain that you want to allow. This property is available when an embedder puts your page in the IFRAME's SRC attribute and the
page loads for the first time
0
Ashish12y ago
If you want to restrict on client side:

if (window.top.location.host != "mydomainname")
{
document.body.innerHTML = "Access is not allowed";
}

ADD above javascript in your code and tell me .....
0
Priti Kumari12y ago
r u understand my problem?
0
Priti Kumari12y ago
When my site is in running mode and i press F12 and Change iframe src value to this url http://www.c-sharpcorner.com/ then my site load this site in my web site iframe....and i want to restrict fro security purpose.
0
Ashish12y ago
Case 1:
My Site Scene is like this:
when i load my web page then my url is like:http://mydomainname/page/mypage.aspx
in mypage.aspx one iframe, in this iframe my another page load dynamicaly according to user click on some specific link.
so my parent url http://mydomainname/page/mypage.aspx not change but my iframe page is change every time according to user click.
Case 2:
In above condition when i add another site url to my iframe src then its load another site to my web site iframe.so i want to restrict this .

Q1) Is your Case 1 working ?
Q2) When you want to restrict another site url in your Iframe, then why are you setting src to that site. ?
Because its browser feature to show the requested page in Iframe.

0
Priti Kumari12y ago
yes sir......its my requirement.......
0
Priti Kumari12y ago
i want to restrict another domain site to add in my web site iframe src.I am trying this from three days but i am not foun d soluntion for this
0
Ashish12y ago
So, By your explanation i conclude that your requirement is that your iframe always use mydomainname and it should not use other domain.

Am i right?

Working on this give me some time.
0
Priti Kumari12y ago
My Site Scene is like this:
when i load my web page then my url is like:http://mydomainname/page/mypage.aspx
in mypage.aspx one iframe, in this iframe my another page load dynamicaly according to user click on some specific link.
so my parent url http://mydomainname/page/mypage.aspx not change but my iframe page is change every time according to user click.

In above condition when i add another site url to my iframe src then its load another site to my web site iframe.so i want to restrict this .please help me......
0
Ashish12y ago
I will appreciate , if you elaborate your scenario more specifically . This question is seeming intresting so please provide with some more detail. i want to solve this.

Thanks,
Ashish
0
Priti Kumari12y ago
I want to restrict iframe for specfic domain pages.
0
Ashish12y ago
Attribute

<br /><br />Use attribute value allow-same-origin .<br /><br /><br />And for your more information and more knowledge about this<br />check this link:<br /><br />http://javascript.info/tutorial/same-origin-security-policy</div><div class="comment-foot"><span class="reply-vote"><a href="/login?returnurl=%2Fforums%2Frestricting-my-site-to-use-other-domains-url-in-iframe" class="reply-vote-btn reply-vote-up" title="Sign in to vote up" aria-label="Vote up"><svg width="14" height="14" viewBox="0 0 16 16" fill="currentColor" aria-hidden="true"><path d="M8 2.5 14.5 12h-13z"></path></svg></a><span class="reply-vote-score" title="0 up, 0 down">0</span><a href="/login?returnurl=%2Fforums%2Frestricting-my-site-to-use-other-domains-url-in-iframe" class="reply-vote-btn reply-vote-down" title="Sign in to vote down" aria-label="Vote down"><svg width="14" height="14" viewBox="0 0 16 16" fill="currentColor" aria-hidden="true"><path d="M8 13.5 1.5 4h13z"></path></svg></a></span></div></div></article></li></ul></section></div></div><script>$RS=function(a,b){a=document.getElementById(a);b=document.getElementById(b);for(a.parentNode.removeChild(a);a.firstChild;)b.parentNode.insertBefore(a.firstChild,b);b.parentNode.removeChild(b)};$RS("S:2","P:2")</script><script>$RB=[];$RV=function(a){$RT=performance.now();for(var b=0;b<a.length;b+=2){var c=a[b],e=a[b+1];null!==e.parentNode&&e.parentNode.removeChild(e);var f=c.parentNode;if(f){var g=c.previousSibling,h=0;do{if(c&&8===c.nodeType){var d=c.data;if("/$"===d||"/&"===d)if(0===h)break;else h--;else"$"!==d&&"$?"!==d&&"$~"!==d&&"$!"!==d&&"&"!==d||h++}d=c.nextSibling;f.removeChild(c);c=d}while(c);for(;e.firstChild;)f.insertBefore(e.firstChild,c);g.data="$";g._reactRetry&&requestAnimationFrame(g._reactRetry)}}a.length=0}; $RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a,b),2===$RB.length&&("number"!==typeof $RT?requestAnimationFrame($RV.bind(null,$RB)):(a=performance.now(),setTimeout($RV.bind(null,$RB),2300>a&&2E3<a?2300-a:$RT+300-a)))):b.parentNode.removeChild(b)};$RC("B:1","S:1")</script><div style="display:none" id="S:3"></div><script>$RC("B:3","S:3")</script><div style="display:none" id="S:0"></div><script>$RC("B:0","S:0")</script></body></html>