IFRAME

有人试图破解iframe，有人试图防御iframe，将相爱相杀尽量都记录在此

在此强推这篇文章，虽然有些年代感了：Busting Frame Busting:a Study of Clickjacking Vulnerabilities on Popular Sites

Redirect parent window from an iframe action VS How to prevent IFRAME from redirecting top-level window

Unfortunately sandbox does not allow Flash or any other type of object in the sandboxed frame, making the sandbox feature useless in many cases.