+ 9

Why are the <frame> and <frameset> tags not supported in HTML5?

5th Mar 2017, 5:40 PM
Rahul George
Rahul George - avatar
2 Réponses
+ 9
Yes very, very evil to add to Mario Laurisch's answer. When combined with social engineering, attackers can perform something called "Cross Frame Scripting" CFS, where users may believe the page to be legitimate but has bad intent, stealing vital data from them. There's ways to break out of a frame/window with JavaScript code however, just use embed as stated by Mario. if (window.top !== window.self){ location.href = "http://your-website.com"; // or location.href = window.self; }
5th Mar 2017, 6:15 PM
Mark Foxx
Mark Foxx - avatar
+ 7
because frames are evil. use embed instead.
5th Mar 2017, 5:50 PM
Mario L.
Mario L. - avatar