blocks|key|3742852|text|IMO:如果你不放src，你的页面就不会生效。但就是这样。如果您放置了一个src=""，您的服务器将记录许多404错误。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3742853|没有什么是真正错误的，就像“破坏性”。但是，使用iframe本身是否真的是错误的呢？|3742854|°-|3742855|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

IMO: if you don't put the src, your page won't validate. But's about it.
If you put a src="", your server will log many 404 errors.

Nothing is really wrong as in "damaging". But then, is it actually not wrong to use an iframe in itself?

°-

blocks|key|1979313|text|不确定是否所有浏览器都支持“约:空白”，所以我只需使用您自己的空白页即可。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1979314|另一个想法:为什么不使用javascript而不是仅仅使用src来添加整个iframe呢？|1979315|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

Not sure if all browsers support "about:blank", so I'd just go with your own blank page then.

Another idea: Why not add the whole iframe using javascript instead of just the src?

blocks|key|1979325|text|关于|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1979326|about:blank|code-block|syntax|javascript|1979327|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

What about

<pre><code>about:blank
</code></pre>

blocks|key|1979356|text|在创建“空”iframe+(例如，作为iframe+)时，标准方法是将src设置为javascript:false;。这是大多数为您创建iframe的JavaScript库使用的方法(例如，YUI的覆盖)。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1979357|entityMap^0|15|H|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

Standard approach when creating an "empty" iframe (as an iframe shim, for example), is to set the src as <code>javascript:false;</code>. This is the method used by most of the JavaScript libraries that create iframe shims for you (e.g. YUI's Overlay).

blocks|key|3742969|text|您的评论澄清了您计划使用iframe作为表单提交的目标：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3742970|我会在服务器上使用一个发送204+no+content的空文档。|offset|length|style|CODE|3742971|它避免了|3742972|3742973|在IE和HTTPS模式下的“混合内容”警告|unordered-list-item|3742974|不必要的错误，因为客户端不理解javascript:协议|3742975|和其他奇异的恶作剧。|3742976|3742977|它也是有效的HTML。|3742978|那么，如果它生成一个额外的请求呢？设置正确的缓存头，每个客户端只有一个请求。|3742979|entityMap^0|0|D|E|0|0|0|0|F|B|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Z|8|@$D|10|E|11|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|12|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|13|8|@]|9|@]|A|$]]|$1|K|3|L|5|M|7|14|8|@]|9|@]|A|$]]|$1|N|3|O|5|M|7|15|8|@$D|16|E|17|F|G]]|9|@]|A|$]]|$1|P|3|Q|5|M|7|18|8|@]|9|@]|A|$]]|$1|R|3|-4|5|6|7|19|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|1A|8|@]|9|@]|A|$]]|$1|U|3|V|5|6|7|1B|8|@]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1C|8|@]|9|@]|A|$]]]|X|$]]

Re your comment clarifying that you're planning to use the iframe as the target for a form submission:

I would use an empty document on the server that sends back a <code>204 no content</code>.

It avoids

<ul>
<li>"mixed content" warnings in IE and HTTPS mode </li>
<li>Unnecessary errors because a client doesn't understand the <code>javascript:</code> protocol </li>
<li>and other exotic shenanigans.</li>
</ul>

It's also valid HTML. 

So what if it generates an extra request? Set the caching headers right, and there will be only one request for each client.

blocks|key|3742981|text|是的，我知道我在恢复一条旧线索。告我。我对答案感兴趣。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3742982|我不明白为什么使用触发器作为表单提交会阻止动态创建IFrame。这不正是你想做的吗？|3742983|<html>
<head>
<script+type="text/javascript">
function+setIFrame(elemName,+target,+width,+height)+{
++++document.getElementById(elemName).innerHTML="<iframe+width="%2Bwidth%2B"+height="%2Bheight%2B"+src='"%2Btarget%2B"'></iframe>";
}
</script>
</head>
<body>
<div+id="iframe"+style="width:400px;+height:200px"></div>
<form+onSubmit="setIFrame('iframe',+'http://www.google.com',+400,+200);+return+false;">
<input+type="submit"+value="Set+IFrame"/>
</form>
</body>
</html>|code-block|syntax|javascript|3742984|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

Yes, I know I'm reviving an old thread. Sue me. I'm interested in the answer.

I don't understand why having the trigger being a form submit precludes dynamically creating the IFrame. Does this not do exactly what you want?

<pre><code>&lt;html&gt;
&lt;head&gt;
&lt;script type="text/javascript"&gt;
function setIFrame(elemName, target, width, height) {
 document.getElementById(elemName).innerHTML="&lt;iframe width="+width+" height="+height+" src='"+target+"'&gt;&lt;/iframe&gt;";
}
&lt;/script&gt;
&lt;/head&gt;
&lt;body&gt;
&lt;div id="iframe" style="width:400px; height:200px"&gt;&lt;/div&gt;
&lt;form onSubmit="setIFrame('iframe', 'http://www.google.com', 400, 200); return false;"&gt;
&lt;input type="submit" value="Set IFrame"/&gt;
&lt;/form&gt;
&lt;/body&gt;
&lt;/html&gt;
</code></pre>

blocks|key|1979461|text|javascript:false在现代浏览器中工作。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1979462|我看到的是，只有当愚蠢的蜘蛛尝试将javascript:false作为页面加载时，这才会“失败”。|1979463|解决办法:堵住那些笨蜘蛛。|1979464|entityMap^0|0|G|0|H|G|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|R|8|@]|D|@]|E|$]]|$1|J|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|K|$]]

<code>javascript:false</code> works in modern browsers.

What I've seen is that this only "fails" when dumb spiders try to load <code>javascript:false</code> as a page.

Solution: Block the dumb spiders.

blocks|key|3701168|text|正如我在这个问题中所提到的：Is+an+empty+iframe+src+valid?，完全省略src=属性看起来是可以接受的。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3701169|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/5946607/is-an-empty-iframe-src-valid/8823732#8823732^0|1C|4|E|T|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]]|D|@$9|Q|A|R|1|S]]|E|$]]|$1|F|3|-4|5|6|7|T|8|@]|D|@]|E|$]]]|G|$H|$5|I|J|K|E|$L|M]]]]

As I posted in this question: <a href="https://stackoverflow.com/questions/5946607/is-an-empty-iframe-src-valid/8823732#8823732">Is an empty iframe src valid?</a>, it looks acceptable to just leave out the <code>src=</code> attribute completely.

blocks|key|3743014|text|javascript:false|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3743015|IE10和FF+(在Linux中签入v23+)将显示“false”作为内容。|3743016|javascript:void(0)+&&+javascript:;|3743017|IE将在iframe中显示“无法显示网页”错误。此外，当将src从有效的url设置为javascript:void(0)时，页面将不会变为空白。|3743018|about:blank|3743019|在所有浏览器中都可以工作，但IE9向服务器发送路径为"null“的请求。仍然是最好的选择海事组织|3743020|结帐http://jsfiddle.net/eybDj/1|3743021|查看http://jsfiddle.net/sv_in/gRU3V/，看看在JS的动态更新中iframe是如何变化的|3743022|entityMap|0|LINK|mutability|MUTABLE|url|http://jsfiddle.net/eybDj/1|1|http://jsfiddle.net/sv_in/gRU3V/^0|0|G|0|0|0|I|M|C|0|16|I|0|0|B|0|0|2|R|0|0|2|W|1|0^^$0|@$1|2|3|4|5|6|7|13|8|@$9|14|A|15|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|16|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|17|8|@$9|18|A|19|B|C]|$9|1A|A|1B|B|C]]|D|@]|E|$]]|$1|J|3|K|5|6|7|1C|8|@$9|1D|A|1E|B|C]]|D|@]|E|$]]|$1|L|3|M|5|6|7|1F|8|@$9|1G|A|1H|B|C]]|D|@]|E|$]]|$1|N|3|O|5|6|7|1I|8|@]|D|@]|E|$]]|$1|P|3|Q|5|6|7|1J|8|@]|D|@$9|1K|A|1L|1|1M]]|E|$]]|$1|R|3|S|5|6|7|1N|8|@]|D|@$9|1O|A|1P|1|1Q]]|E|$]]|$1|T|3|-4|5|6|7|1R|8|@]|D|@]|E|$]]]|U|$V|$5|W|X|Y|E|$Z|10]]|11|$5|W|X|Y|E|$Z|12]]]]

<code>javascript:false</code>: 
IE10 and FF (checked in v23 in Linux) will show 'false' as content. 

<code>javascript:void(0)</code> &amp;&amp; <code>javascript:;</code>: 
IE will show 'cannot display the webpage' error in the iframe. Also, when setting the src from a valid url to <code>javascript:void(0)</code>, the page will not get blank. 

<code>about:blank</code>: 
Works in all browsers but IE 9 sends an request to the server with path "null". Still the best bet IMO

Checkout <a href="http://jsfiddle.net/eybDj/1" rel="nofollow">http://jsfiddle.net/eybDj/1</a> 
Checkout <a href="http://jsfiddle.net/sv_in/gRU3V/" rel="nofollow">http://jsfiddle.net/sv_in/gRU3V/</a> to see how iframe src changes on dynamic updation with JS

blocks|key|1979517|text|我遇到了这一行代码：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1979518|iframe.setAttribute("src",+"javascript:false");|code-block|syntax|javascript|1979519|也是。我想移除javascript:URL。|offset|length|style|CODE|1979520|本说明来自网络超文本应用技术工作组，更新日期为2019年10月2日|1979521|[https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element][4.8.5_The_iframe_element]|1979522|1979523|+iframe或frame元素的其他步骤如下：|blockquote|1979524|1979525|如果元素没有指定src属性，或者它的值是空字符串，则让url成为URL“约:空”.。|1979526|entityMap|0|LINK|mutability|MUTABLE|url|https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element][4.8.5_The_iframe_element]^0|0|0|7|E|0|0|0|32|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|15|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|16|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|17|8|@$I|18|J|19|K|L]]|9|@]|A|$]]|$1|M|3|N|5|6|7|1A|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|1B|8|@]|9|@$I|1C|J|1D|1|1E]]|A|$]]|$1|Q|3|-4|5|6|7|1F|8|@]|9|@]|A|$]]|$1|R|3|S|5|T|7|1G|8|@]|9|@]|A|$]]|$1|U|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]|$1|V|3|W|5|6|7|1I|8|@]|9|@]|A|$]]|$1|X|3|-4|5|6|7|1J|8|@]|9|@]|A|$]]]|Y|$Z|$5|10|11|12|A|$13|14]]]]

I run into this line of code:

<pre><code>iframe.setAttribute("src", "javascript:false");
</code></pre>

as well. I wanted to remove <code>javascript:URL</code>.

Found this note from the Web Hypertext Application Technology Working Group [Updated 2 October 2019]

[<a href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element][4.8.5_The_iframe_element]" rel="nofollow noreferrer">https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element][4.8.5_The_iframe_element]</a>

<blockquote>
 The otherwise steps for iframe or frame elements are as follows:
 
 If the element has no src attribute specified, or its value is the
 empty string, let url be the URL "about:blank".
</blockquote>

I would like to create an <code>&lt;iframe&gt;</code> on the page, but then add the <code>src</code> later. If I make an iframe without an <code>src</code> attribute, then it loads the current page in some browsers. What is the correct value to set for the <code>src</code> so that it just loads a blank iframe?

The answers I've seen are:

<ul>
<li><code>about:blank</code></li>
<li><code>javascript:false</code></li>
<li><code>javascript:void(0)</code></li>
<li><code>javascript:"";</code></li>
<li>url to a blank page</li>
</ul>

Is there a clear winner? If not, what are the tradeoffs?

I'd like to not have mixed content warnings for HTTPS urls, nor any back-button, history, or reload weirdness in all browsers from IE6 onward.

iframe without an src attribute

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我想在页面上创建一个<iframe>，但是稍后添加src。如果我创建一个没有src属性的iframe，那么它会在某些浏览器中加载当前页面。要为src设置的正确值是什么，以便它只加载一个空白的iframe？我看到的答案是：about:blankjavascript:falsejavascript:void(0)javas...

问如果没有src属性
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如果没有src属性EN