本文介绍了两种使用 JavaScript 防止网页被嵌入 iframe 的方法。第一种通过自执行函数保护 window 对象,判断当前窗口与顶层窗口地址是否一致,不一致则强制跳转;第二种采用简洁的一行代码实现相同逻辑,利用短路运算符在顶层位置不等时执行赋值操作,有效避免网站被恶意嵌套。
JavaScript 防止网页被嵌入 iframe 的方法
本文介绍了一种利用 JavaScript 防止网页被嵌入 iframe 的技术方案,供读者参考。
方法一:自执行函数保护 window 对象
第一种实现方案如下:
<script>
// Break out of an iframe, if someone shoves your site
// into one of those silly top-bar URL shortener things.
//
// Passing `this` and re-aliasing as `window` ensures
// that the window object hasn't been overwritten.
//
// Example:
// var window = 'haha, punked!';
//
// Note: Probably unnecessary, but just for kicks.
(function(window) {
if (window.location !== window.top.location) {
window.top.location = window.location;
}
})(this);
</script>
方法二:简洁的一行代码实现
第二种实现方案如下:
<script>
// A more cryptic one-liner, to awe & impress.
//
// No need to protect `window` since `this` is
// immutable, and at the topmost level means
// `window` anyways. Here, we compare locations
// on the left side of the "&&" and execute the
// code in parenthesis if that condition is
// true (top location isn't iframe location).
//
// Otherwise, nothing happens. It's basically an
// if statement without wrapping curly brackets.
//
// Weird, I know. But pretty cool, right? :)
this.top.location !== this.location && (this.top.location = this.location);
</script>
希望上述内容对您的 JavaScript 编程有所帮助。