Busting Frame Busters in Foglight Experience Viewer (FxV)

Jason here from the Foglight team. Anyone heard of a frame buster? These are AKA "frame breakers" and basically are little snippets of javascript that when your browser stumbles upon them, and you have javascript turned on (who doesn't), they can forcibly close all HTML frames in the browsing session and potentially redirect the page.

Well, they come in several forms but most all are javascript-derived. Here are some short examples for those HTML-minded:

if (parent!= self){top.location.href = location.href}
if (top.frames.length!=0) top.location=self.document.location;
if (window!= window.top) top.location.href = location.href;
if (self!= top) top.location.href = self.location.href;
if (parent.frames.length > 0) { parent.location.href = location.href; }

OK, I care...what should I do?

FxV has the option as of version 5.5.4 to enable "Static Page Elements." In order to see this option on the Configure menu, it MUST be given permission in the User Group first. Once this is ready, let's tackle busting the frame buster. Static Page Elements are web resources cached by the FxV server for use in replay. Common files such as JS libraries can be uploaded to the FxV server for use in cases where a file is served by an external server or cached by the end user's browser and therefore not captured as part of the user's session (since it never was requested). HOWEVER, we can use this feature to upload the site's frame buster code so it doesn't execute during replay.

The first step is to identify the problem page. This can be done by going through a replay until FxV is closed down because of a frame buster. Find the offending page URL, replaying again in "Source View" so that it doesn't break the frame. Once in Source View, find the offending .js URL it is referencing. See screenshot below:
Next, open a fresh tab in a browser and paste that URL into the tab and save it from the browser's File->Save menu as a .js file. See screenshot:
Once you have saved it, now go back into FxV, and select Configure->Static Page Elements. This will bring you to this screen:
  
Click Add Static Page Element and browse for the File that was saved. Give it a name and press OK. No other options need to be set. See pic:
That's it! You will likely have to repeat this process if there are other referenced URLs that have similar code. Take note of the js examples above to find them. Often you can search for the word "location" in the .js file.\
That's it...good luck and good monitoring!
-Jason
Related
Recommended