Edit fiddle - JSFiddle - React, Tailwind, and code Playground

JSFiddle - React, Tailwind, and code Playground

HTML

<iframe src="javascript:window.parent.f1 = window;" style="z-index: 1" frameborder="0"></iframe>
<h1 style="text-align: center" onclick="f1.open('http://bb.com')">
First Iframe Blocked [OK]
</h1>

<h1 style="text-align: center" onclick="f2.open('http://bb.com')">
Second Iframe (By JavasCript) blocked [OK]
</h1>

<h1 style="text-align: center" onclick="f3.open('http://bb.com')">
Second Iframe (By Javascript + SetTimeout) vulnerable [FAIL]
</h1>

JavaScript

document.body.insertAdjacentHTML('beforeend', '<iframe src="javascript:window.parent.f2 = window;" style="z-index: 1" frameborder="0" scrolling="no" marginwidth="0" marginheight="0"></iframe>');

setTimeout(function(){
	document.body.insertAdjacentHTML('beforeend', '<iframe src="javascript:window.parent.f3 = window;" style="z-index: 1" frameborder="0" scrolling="no" marginwidth="0" marginheight="0"></iframe>');
});

Join the 4+ million users, and keep the JSFiddle dream alive.

Ad-free

All ads in the editor and listing pages are turned completely off.
Use pre-released features

You get to try and use features (like the Palette Color Generator) months before everyone else.
Fiddle collections

Sort and categorize your Fiddles into multiple collections.
Private collections and fiddles

You can make as many Private Fiddles, and Private Collections as you wish!
Console

Debug your Fiddle with a minimal built-in JavaScript console.

JSFiddle - React, Tailwind, and code Playground

HTML

JavaScript

Please Whitelist JSFiddle in your content blocker.

Join the 4+ million users, and keep the JSFiddle dream alive.

Ad-free

Use pre-released features

Fiddle collections

Private collections and fiddles

Console