Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Iframetest.com

iframetest.com

Post reply on HN
Print view View original

1–10 of 10 posts

Re: Show HN: Iframetest.com

#2

Post by DoctorOW »

> Client-Side Only: The iframe embedding test runs entirely in your browser. No URLs are sent to external servers.

Except isn't one of the tests through a proxy or whatever Webfuse is?

Also, what is Webfuse?

Re: Show HN: Iframetest.com

#3

Post by js4ever »

DoctorOW wrote: post #2

> Client-Side Only: The iframe embedding test runs entirely in your browser. No URLs are sent to external servers. Except isn't one of the tests through a proxy or whatever Webfuse is? Also, what is Webfuse?

Webfuse is the product secretly advertised in that iframe tester. It seems to be a solution to proxy and manipulate iframes

Re: Show HN: Iframetest.com

#4

Post by unsnap_biceps »

DoctorOW wrote: post #2

> Client-Side Only: The iframe embedding test runs entirely in your browser. No URLs are sent to external servers. Except isn't one of the tests through a proxy or whatever Webfuse is? Also, what is Webfuse?

Yes, it sends the url to webfuse.com for the proxy test and to a ws21.webfuse.com host for a session data that also contains the url. They also open a web socket to ws21.webfuse.com that also contains the url.

Ooh, and to example-org-p.webfuse.com to actually fetch the content for the proxy.

It's totally a lie that URLs are processed client-side only.

Re: Show HN: Iframetest.com

#5

Post by jdelman »

This is cool. I noticed that, after testing a few URLs, hitting the back button in my browser popped some state to load the previous iframe URL, but the URL of the whole page itself didn't change. It would be nice if the URL had a query param to reflect the currently shown iframe URL.

Re: Show HN: Iframetest.com

#6

Post by soulchild37 »

Good tool, but I am sure there will be a lot of bounty beggar who will use this tool to automate scanning for vulnerable small blogs / website for iFrame / clickjacking , and then send email to the website owner saying they have discovered "high impact security issue" and begging for bounty.

Re: Show HN: Iframetest.com

#8

Post by cadamsdotcom »

soulchild37 wrote: post #6

Good tool, but I am sure there will be a lot of bounty beggar who will use this tool to automate scanning for vulnerable small blogs / website for iFrame / clickjacking , and then send email to the website owner saying they have discovered "high impact security issue" and begging for bounty.

I see you have invented the hammer.

Unfortunately I predict many people using it to clock one another over the head.

Re: Show HN: Iframetest.com

#9

Post by tonysurfly »

jdelman wrote: post #5

This is cool. I noticed that, after testing a few URLs, hitting the back button in my browser popped some state to load the previous iframe URL, but the URL of the whole page itself didn't change. It would be nice if the URL had a query param to reflect the currently shown iframe URL.

thanks, will add url param too

Re: Show HN: Iframetest.com

#10

Post by tonysurfly »

DoctorOW wrote: post #2

> Client-Side Only: The iframe embedding test runs entirely in your browser. No URLs are sent to external servers. Except isn't one of the tests through a proxy or whatever Webfuse is? Also, what is Webfuse?

We sell augmented web proxy - and this website was built to demonstrate one of the use case of Webfuse, embed anything.

Regarding the about section, it has not been updated after the first version, indeed proxy test isn't client side only.

Post reply on HN