iFrames - Instructions

iFrames are sometimes used on web pages to embed content. Some sites can block this.

Example

The example page has an iFrames.

The iframe elements are added to a page like any other element.

They can be used to pull in content from the same domain. They can also pull in content from other domains.

There is a potential for abuse when a site embeds external content because they may be trying to fool the user they are on the external site and may be trying to execute a clickjacking attack.

The drop down has a number of sites hard coded, some will allow embedding in an iframe, some will not.

Automated Tools

Most automated tools have commands dedicated to working with iframes.

In WebDriver you would switchTo().frame(...) the iframe to work with it.

How much should you automate this?

Can you detect automatically if a site does not allow embedding?