From 47a62324c26e0d7343db985759305b3ab6c477cb Mon Sep 17 00:00:00 2001
From: Igor Zhukov <igor.beatle@gmail.com>
Date: Wed, 30 Apr 2014 11:51:18 +0800
Subject: [PATCH] Clickjacking protection

---
 app/app.manifest | 2 +-
 app/css/app.css  | 1 +
 app/index.html   | 9 +++++++++
 3 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/app/app.manifest b/app/app.manifest
index 99da570b..c017decd 100644
--- a/app/app.manifest
+++ b/app/app.manifest
@@ -1,6 +1,6 @@
 CACHE MANIFEST
 
-# 4
+# 5
 
 NETWORK:
 *
diff --git a/app/css/app.css b/app/css/app.css
index 59d0dea9..447d1598 100644
--- a/app/css/app.css
+++ b/app/css/app.css
@@ -1,6 +1,7 @@
 /* app css stylesheet */
 
 html {
+  display: none;
   background: #dee4e9 url(../img/bg_tile.png) 0 0 repeat;
   /*background-size: 300px 468px;*/
 }
diff --git a/app/index.html b/app/index.html
index 9cf16711..aa155c5b 100644
--- a/app/index.html
+++ b/app/index.html
@@ -23,6 +23,15 @@
   <script type="text/javascript">
   (function () {
 
+    // Prevent click-jacking
+    try {
+      if (self == top) {
+        document.documentElement.style.display = 'block';
+      } else {
+        top.location = self.location;
+      }
+    } catch (e) {console.error('CJ protection', e)};
+
     window.safeConfirm = function (params, callback) {
       if (typeof params === 'string') {
         params = {message: params};