Skip to main content
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
Source Link

Given that iFrames are used in many common exploits, I'd like to conditionally disable iFrames except for sites that require it such as GMailGMail, or MasterCard SecureCodeMasterCard SecureCode.

I also suspect the <object> tag has related functionality.

  • Is there any way to conditionally block the usage of iFrames (and/or <object>) on the client side, perhaps in a similar way a pop up blocker works?

Given that iFrames are used in many common exploits, I'd like to conditionally disable iFrames except for sites that require it such as GMail, or MasterCard SecureCode.

I also suspect the <object> tag has related functionality.

  • Is there any way to conditionally block the usage of iFrames (and/or <object>) on the client side, perhaps in a similar way a pop up blocker works?

Given that iFrames are used in many common exploits, I'd like to conditionally disable iFrames except for sites that require it such as GMail, or MasterCard SecureCode.

I also suspect the <object> tag has related functionality.

  • Is there any way to conditionally block the usage of iFrames (and/or <object>) on the client side, perhaps in a similar way a pop up blocker works?
added 2 characters in body
Source Link
makerofthings7
  • 51.1k
  • 56
  • 268
  • 562

Given that iFrames are used in many common exploits, I'd like the ability to conditionally disable iFrames except for sites that require it such as GMail, or MasterCard SecureCode.

I also suspect the <object> tag has related functionality.

  • Is there any way to conditionally block the usage of iFrames (and/or <object>) on the client side, perhaps onin a similar way popa pop up blocker works?

Given that iFrames are used in many common exploits, I'd like the ability to disable iFrames except for sites that require it such as GMail, or MasterCard SecureCode.

  • Is there any way to conditionally block the usage of iFrames on the client side, perhaps on a similar way pop up blocker works?

Given that iFrames are used in many common exploits, I'd like to conditionally disable iFrames except for sites that require it such as GMail, or MasterCard SecureCode.

I also suspect the <object> tag has related functionality.

  • Is there any way to conditionally block the usage of iFrames (and/or <object>) on the client side, perhaps in a similar way a pop up blocker works?
Source Link
makerofthings7
  • 51.1k
  • 56
  • 268
  • 562

Is there any way I can block (or conditionally approve of) iFrames on the client side?

Given that iFrames are used in many common exploits, I'd like the ability to disable iFrames except for sites that require it such as GMail, or MasterCard SecureCode.

  • Is there any way to conditionally block the usage of iFrames on the client side, perhaps on a similar way pop up blocker works?