Eliminate iframes

Andre Silaghi <[email protected]> Fri, 21 Jun 2013 15:31:43 +0200
Newsgroups gmane.comp.security.basics
Message-ID <CAKUUvkYDCspc-aiPtVBAAgdmyEgG6-aXzLNEzmjr9r_rvj9yzg@mail.gmail.com>
hi community,

I am curious about your way of getting rid of iframes within large -
enterprise - networks. The problem is that a couple of websites are
trying to infect you using drive-by downloads mostly via iframes
within hijacked websites. The firewalls will not do it since it
operates only in osi level 3 or 4 but not within the application level
where iframes are usually transfered via http.

Is there any solution you could propose?

best regards,
andré

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------