[wp-trac] [WordPress Trac] #21854: Theme Customizer Goes Bonkers on Frame Buster

WordPress Trac noreply at wordpress.org
Tue Nov 13 00:59:18 UTC 2012


#21854: Theme Customizer Goes Bonkers on Frame Buster
--------------------------+------------------------------
 Reporter:  miqrogroove   |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Appearance    |     Version:  3.4.2
 Severity:  normal        |  Resolution:  wontfix
 Keywords:                |
--------------------------+------------------------------
Changes (by miqrogroove):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 I think the best solution is to perform origin checking in JS rather than
 trying to fix it in PHP.  This works to accomplish frame busting while
 remaining compatible with WP:

 {{{
 if (window != top) {
     if (window.parent.location.host != window.location.host) {
         top.location = document.location;
     }
 }
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21854#comment:14>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list