View Single Post
Old 02-26-2007, 04:59 PM   #1 (permalink)
FirefoxRocks
Member
 
FirefoxRocks's Avatar
 
Join Date: Feb 2007

Posts: 4
Rep Power: 0 FirefoxRocks is on a distinguished road
fTrader: (0)
fBuck$: 41
Bank: 62
Total fBuck$: 103

My Forumer
My Country:
Angry Found frame-breaker script!!

Recently, I have been told to design a website for a group in a forum to expand information exchange. I have tried to embed the forum into the newly-designed website and it had worked. However, after about 2 or 3 days of that, I found that the forum broke out of the object on the page.

Today, I have found a piece of code that broke out of <frame>, <iframe> and <object>. The code is:
HTML Code:
<script type="text/javascript">
<!--
if (window != top) top.location.href = location.href;
-->
</script>
-->
It is plainly visible here at http://xkingdom.7.forumer.com. This is why it has been breaking out of the frames. Why is this piece of code there? I don't think that putting the forum into an <object> on a page would violate any rules and/or bring a security/user risk to anything.

The code I am using for the forum in the site is this:
HTML Code:
<object data="http://xkingdom.7.forumer.com" type="text/html" standby="XKingdom Forum (embedded)" style="height:450px;width:860px">
<p>XKingdom Forum - An error has occurred in the site.</p>
</object> 
I know it is only viewable in Firefox and non-IE browsers. The code is designed that way to validate through the XHTML Strict doctype.

Could anyone give an explanation/help please?
Thank you.
FirefoxRocks is offline   Reply With Quote