busting-frame-busting-a-study-of-clickjacking-vulnerabilities-on-popular-sites-slides

Courtesy <strong>of</strong> Facebook
• Facebook deploys an exotic variant:
if (top != self) {
try {
if (top.location.hostname.indexOf("apps") >= 0) throw 1;
} catch (e) {
window.document.write("
");
}
}