abort-on-iframe-property-read

The abort-on-iframe-property-read snippet patches a list of properties on the iframe's window object that aborts execution when the property is read.

You can use this snippet to prevent CV providers from using iframe native functions.

Parameters

Name	Description	Mandatory
properties	The list with the targeted properties to abort.	Yes

Filter examples

The following table lists examples that use the abort-on-iframe-property-read snippet:

Filter	Result
abort-on-iframe-property-read atob	The code that reads/calls the atob function inside an iframe throws an exception.
abort-on-iframe-property-read atob btoa	The code that reads/calls the atob or btoa function inside an iframe throws an exception.
abort-on-iframe-property-read adHandler.cmd.push	The code that reads/calls the push function throws an exception. This function is a property of cmd, which is a property of the adHandler global object.
abort-on-iframe-property-read Element.prototype.attachShadow	The code that reads/calls the attachShadow property throws an exception. This example shows that you can attach the filter to prototype iframe properties as well.

Debugging

The following table contains messages you'll find useful during debugging:

Message	When the error occurs	Definition
no property to abort on read	At the beginning of snippet execution	No property parameter was passed to the snippet.
<property> access aborted	Each time the property is set, right before throwing the error	The error is about to be thrown.
aborting on <property> access	Right before attaching to the property	This log is printed just before the snippet takes over the property getter OR setter.