Server-side detection that a page is shown inside an IFrame

Question

Is it possible to determine - server-side - whether a page has been loaded within an IFrame?

When certain errors happen in my application the user gets redirected to Default.aspx and an error message is shown. The text of that error message gets set in session by exception handling code. The error message gets cleared from session once it has been shown.

However, part of my application has to use an IFrame (it's doing a 3D Secure card payment check, which mandates an IFrame in order to display the card provider's authentication UI). If an error takes place during this process my redirect takes effect within the IFrame. I am using JavaScript to detect this and reload Default.aspx correctly, but this means that I get two Page_Loads in rapid succession, and the error message only gets shown on the first one (and then cleared).

Mozilla Developer Network. I actually think I just opened up a whole can of worms with this and probably shouldn't have added my message here until I learned myself what's going on, sorry. (see http://stackoverflow.com/questions/15344187/how-does-it-appear-that-mdn-can-detect-a-request-from-an-iframe-on-the-server-si) — JayC, Mar 11 '13 at 17:00

score 3 · Accepted Answer · edited May 23 '17 at 10:28

3

You can do it in client side: How to identify if a webpage is being loaded inside an iframe or directly into the browser window?

The workaround i found is put some identifier into querystring of a url opened inside iframe.

edited May 23 '17 at 10:28

Community

1
1

answered Oct 19 '11 at 01:29

Afonso França

663
1
4
14

score 0 · Answer 2 · answered Mar 14 '15 at 11:02

0

This is impossible because client can open iframe with javascript disabled. http://caniuse.com/#feat=iframe-sandbox

answered Mar 14 '15 at 11:02

puchu

3,294
6
38
62

score 0 · Answer 3 · answered Apr 07 '09 at 14:09

I don't think you can detect in the sense of having some sort of Page.IsInIFrame() kind of functionality, but you could consider having different base classes for those pages that are loaded in an IFrame and those that aren't so that you can know the error is from a request that was for an IFrame page that may help to some extent.

score 0 · Answer 4 · answered Apr 07 '09 at 15:00

0

There's no way from the server-side. The only way is via javascript. When you do the redirect, can you pass the error message or code via a querystring?

answered Apr 07 '09 at 15:00

Keltex

26,220
11
79
111

score 0 · Answer 5 · answered Apr 10 '09 at 12:32

0

Won't it work to redirect using Javascript with window.location? Forcing a full page redirect?

answered Apr 10 '09 at 12:32

cerhart

381
3
17

score -3 · Answer 6 · answered Apr 15 '15 at 17:38

-3

simply, check the url of current page.. if it's the same with the IFrame page then redirect to Default.aspx or whatever.

Dim urlpath1 As String = HttpContext.Current.Request.Url.AbsoluteUri
If Right(urlpath1, 13) = "WebForm1.aspx" Then
       Response.Redirect("~/")
   Else
       Response.Write("It's OK!")
   End If

answered Apr 15 '15 at 17:38

Ahmed Abol-Ela

13
5

Just note you need to use Request.UrlReferrer and not Request.Url as Request.Url will return the iframe Url. – Ronen Festinger Apr 23 '15 at 12:00
@RonenFestinger, it won't work when you click a link within the iframe though, the referrer and url will be the same. – Marlon Allan Supetran Jan 05 '21 at 07:53

Server-side detection that a page is shown inside an IFrame

6 Answers6

Linked