Plugin Sale! Save 15% on pro plugins with discount code: NEWYEAR2021
Web Dev + WordPress + Security

HTML Frames Notes Plus

If you think that nobody uses frames anymore, think again. I personally know of one person who threw down some tuff HTML frame action for a personal site. So, in the interest of prosperity, we are hereby establishing this post as our official dumping ground for all HTML frame-related garbage.

Break your pages out of someone else’s frames

We begin our journey with a totally sick JavaScript method for breaking pages out of the illegitimate frames of some pathetic ineffectual mouth-breather:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if (window.self ! = window.top) window.top.location = window.self.location;
	
//--><!]]>
</script>

Likewise, here is an equally effective method that should work in all JS-enabled browsers:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if (window.frames) {
		if (parent != self) {
			location.href="index.html"
		}
	}

//--><!]]>
</script>

Alternatively, this method also works well:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if (parent.frames.length > 0) {
		parent.location.href = location.href;
	}

//--><!]]>
</script>

Here is a similar version of the previous method:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if (parent.frames.length > 0) top.location.replace(document.location);

//--><!]]>
</script>

Here is yet another slightly similar version:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if (top.frames.length > 0) {
		top.location = self.location;
	}

//--><!]]>
</script>

Yet another fine method for breaking out of frames:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if ( top.location != document.location.href ) { 
		top.location = document.location.href; 
	}

//--><!]]>
</script>

Here is the script we use at Monzilla Media:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if ( self.location.href != top.location.href ) {
		top.location.href = self.location.href;
	}

//--><!]]>
</script>

This method stops recursively framed pages:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	if ( window != top ) top.location.href = window.location.href;

//--><!]]>
</script>

This method works great at breaking out and redirecting the browser to the original page:

<script type="text/javascript">
<!--//--><![CDATA[//><!--

	var parent_location = new String(parent.location);
	if ( ( top.location != location ) && parent_location.indexOf('http://domain.tld/path/to/page.html') != 0 )
	top.location.href = document.location.href;

//--><!]]>
</script>

Optimize the content of an iframe

Moving right along, here is a helpful method for optimizing the content of an <iframe>. This code basically displays a link to the content that should be displayed if everything is working correctly. If for some reason the content is not displayed, the link will appear in its place, thereby enabling users to access the missing content via a new window:

<iframe src="page.html" width="333" height="333" scrolling="auto" frameborder="1">
	<a href="page.html" target="_blank">
		[Your browser does not support frames or is configured not to display frames. Click here to visit the related document.]
	</a>
</iframe>

Control frameborder & scroll properties for iframe

To control the frameborder="value" and scroll="yes/no" attributes for iframes using CSS, add the following styles to the document which is being displayed in the iframe:

<style type="text/css">
	html, body {
		overflow: hidden;
		border: none;
	}
</style>

See also: Break Out of Frames

Jeff Starr
About the Author
Jeff Starr = Web Developer. Security Specialist. WordPress Buff.
WP Themes In Depth: Build and sell awesome WordPress themes.
Welcome
Perishable Press is operated by Jeff Starr, a professional web developer and book author with two decades of experience. Here you will find posts about web development, WordPress, security, and more »
The Tao of WordPress: Master the art of WordPress.
Thoughts
Watching. Waiting. Praying.
Got all of my free WordPress plugins updated for imminent WP 5.6 in early December. Pro plugin updates currently in the works.
7G Firewall now integrated into BBQ Firewall (free version). Pro version soon ;)
macOS Big Sur update complete. So far no crazy issues. Except TextEdit, which is completely screwed up and unusable. Replaced with free BBEdit.
Got so sick of macOS’ annoying “red dot” that I had to remove System Prefs from the dock. Come on Apple you can do better.
Beginning development of an Nginx version of 7G Firewall.
Happy Birthday to Perishable Press, celebrating 15 years online! :)
Newsletter
Get news, updates, deals & tips via email.
Email kept private. Easy unsubscribe anytime.