Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Frame injection
open-in-new
<p>A frame injection attack is an attack on <a href="/facts/Internet_Explorer_5/HaSYzQEg">Internet Explorer 5</a>, <a href="/facts/Internet_Explorer_6/MGfbdL4h">Internet Explorer 6</a> and <a href="/facts/Internet_Explorer_7/P5FLswaN">Internet Explorer 7</a> to load arbitrary code in the browser. This attack is caused by <a href="/facts/Internet_Explorer/uL8a4Y5l">Internet Explorer</a> not checking the destination of the resulting frame, therefore allowing arbitrary code such as <a href="/facts/JavaScript/XhhIIEsl">JavaScript</a> or <a href="/facts/VBScript/tg6VhSCk">VBScript</a>. This also happens when code gets injected through frames due to scripts not validating their input. This other type of frame injection affects all browsers and scripts that do not validate untrusted input. </p>