Polyglotting...

Properties are accessible in a sandboxed iframe

This vector attempts to see which properties are available on the parent window of a sandboxed iframe.

Shazzer Master

Created byhackvertor

Created Jun 7, 2024

Updated Sep 5, 2026

Unable to render tweet button

Detecting browser...

CategoryBrowser Quirks

VisibilityPublic

TypeSINGLE

CharsetUTF-8

Template used:

const props = Object.getOwnPropertyNames(window);
for(const prop in document){
  try{
       props.push("document."+prop);
  } catch{}
}
props.forEach(prop => {
    try {
         if(typeof parent[prop] !== 'undefined') {
             log("parent."+prop);
          }
    } catch{}
})