Abstract: Methods and systems for framing detection are disclosed. A web page comprising a child frame is generated. The child frame comprises an instruction to load a component from a merchant. The child frame comprises a header option restricting a loading of the component from within a parent frame associated with a domain external to the merchant. The web page is sent from the merchant to a client browser. It is determined that the web page is loaded within the parent frame in the client browser if a request for the component is not received by the merchant. It is determined that the web page is not loaded within the parent frame in the client browser if a request for the component is received by the merchant.

Abstract: A web browser may implement a single origin policy that makes an exception for media files such as markup language image files. In cases where the delivery of data to a browser may be blocked by a single origin policy, such as where the data originates from a domain other than the domain that originates the initially presented content, the data may be encoded in one or more media files, such as images, to circumvent the single origin policy. The data may be encoded using height and width dimensions, pixel colors, transparencies, or other characteristics of the media file(s). The media file(s) may be sent to the browser and decoded to access the data.

Abstract: A single origin policy of a web browser includes an exception for images, such as markup language image files. Data may be encoded using the height and width dimensions, pixel colors or transparencies, or other parameters defining one or more images. Such images may be sent to device and accepted by the web browser, and decoded to construct the underlying data. A single origin policy may be circumvented during authenticated access sessions so that information from various sources may be received by a requesting device.

Abstract: Methods and systems for framing detection are disclosed. A web page comprising a child frame is generated. The child frame comprises an instruction to load a component from a merchant. The child frame comprises a header option restricting a loading of the component from within a parent frame associated with a domain external to the merchant. The web page is sent from the merchant to a client browser. It is determined that the web page is loaded within the parent frame in the client browser if a request for the component is not received by the merchant. It is determined that the web page is not loaded within the parent frame in the client browser if a request for the component is received by the merchant.