Removing Facebook Transparent Layer When in an iframe

Ok, so you hate the transparent layer that prevent you to use facebook inside an iframe?

Navigation

Layer for security reason

Removing transparent layer instruction.

Why there is a layer

First, before we remove the layer, we will see why the layer is there in the first place. The transparent layer is one of the security feature in facebook to prevent clickjacking.

Clickjacking?

So, what is clickjacking? For a simple explanation, someone can use your click to click something in other legitimate website by making other page website (such as facebook) to be 100% transparent. It can be done by using html styling. So it's one of a known security vulnerability in all browser. Click here for wikipedia definition of clickjacking.

Example of this vulnerability

The page inside an iframe is not visible by using css (styling for html) opacity equal to 0 (iframe is there but not visible). So actualy you might click a button such as sharing in facebook while you actually want to click on something else such as a normal link. Here clickjacking examples: http://deisnet.deis.unibo.it/CJK/

Based on wikipedia, here examples of other clickjacking exploit:

The user receives an email with a link to a video about a news item, but another valid page, say a product page on amazon.com, can be "hidden" on top or underneath the "PLAY" button of the news video. The user tries to "play" the video but actually "buys" the product from Amazon.
Other known exploits have been:
- Tricking users to enable their webcam and microphone through Flash (which has since been corrected by Adobe);
- tricking users to make their social networking profile information public;
- making users follow someone on Twitter;
- share links on Facebook

Now you have understand the risk (or at least, you can pretend to understand it), you can click here to proceed

Navigation

Layer for security reason

Removing transparent layer instruction.

List of supported browser by this guide:
(top 3 most popular browser)

- Internet Explorer (version 6 or higher):

- Firefox (all versions)

- Google Chrome (version 4 or higher)

Suggestion?

Put in the comment box bellow

Select your browser:

Internet Explorer

Mozilla Firefox

Google Chrome

Internet Explorer

1. Install ie7Pro ~ http://www.ie7pro.com/

Instalation details

Download installer from here : http://www.brothersoft.com/download-ie7pro-54469.html

Close internet explorer if it's opened.

Double click installer that you just download. Click run if windows give you warning. (As long as you download it from the location I told you, it's a safe program)

select language that you want

press "next" to continue

Read the agreement if you want to. Then press "I agree"

Select the installation location or just press "next" if you don't understand

Uncheck "enable userscript plugin" (useless if you don't know how to use it, you can still enable it in the future anyway) then press "next"

Any advertisement on this screen, DO NOT install it, except you know that you want it. (it's a safe application, but it just make your computer bloated if you don't use it)

Wait for installation (grab a drink).

Just press "finish" when it's done. Then continue with the step below.

2. Open internet explorer then follow the guide bellow setting.

Open IE7Pro preference

Check the Adblocker modules then press "OK"

Restart Internet explorer then open back the IE7 preference (see the first instruction on the left on how to open it). Now we have AD Blocker on our left, click it

(optional) Uncheck enable default filter rules if you want to see all the advertisement and support advertisement revenue-based website. Then type

Type (or copy paste) everything including the star. Then select the filter type as "Div Filter"