The Xframe Assassin Hack
The Xframe Assassin is an Xframe cross-origin scripting hack that allows websites to execute in the same domain as you, and use frames to display content. Websites are forced to use frames to avoid being blocked by content security policies or XSS (cross-site scripting) policies. The Assassin allows websites to include frames without the user needing to download any plugins or install any add-ons.
How does it work?
It uses a technique called I-Framing to add support for cross-origin scripting on a website. It allows websites to add their own JavaScript code to the top of the HTML document, and have it executed on the user's browser. It also allows websites to use frames to host their content.
