top.location forced redirectEMBEDDED

Replace the entire parent window from inside an iframe. The classic test for sandbox allow-top-navigation.

Behavior by sandbox policy
PolicyExpected result
No sandboxworks
sandbox="allow-scripts"blocked
sandbox="" (strictest)blocked
Embed snippet

This snippet uses the dedicated embed page. Paste it into your own service and check rendering or blocking behavior.

<iframe src="https://xss-playground.com/embed/top-redirect?lang=en" title="XSS Playground - top.location forced redirect" width="600" height="420" loading="lazy" referrerpolicy="strict-origin-when-cross-origin"></iframe>

실행

// 로그 없음

해설