title: Security web inspector is not recognizing my frame busting as an effective one
body: <p>I am running webinspect application to detect security threats on my application. One of the detected threats was (Cross-Frame Scripting) and I have fixed it by adding (X-Frame-Options) header to be (SAMEORIGIN). Now, when I re-run the webinspect it still detects (Cross-Frame Scripting) and the following message is reported with it:</p>
  
  <blockquote>
    <p>An effective frame-busting technique was not observed while loading
    this page inside a frame</p>
  </blockquote>
  
  <p>I have used a lot of block busting code but the same problem persists.
  I have tried the following block killers:</p>
  
  <p>First try:</p>
  
  <pre><code> &lt;style&gt; html{display:none;} &lt;/style&gt; 
     &lt;script&gt;    
      if(self == top) {
      document.documentElement.style.display = 'block';} 
      else {
      top.location = self.location; } 
  &lt;/script&gt;
  </code></pre>
  
  <p>Second try:</p>
  
  <pre><code>if (top != self) { top.location.replace(self.location.href); }
  </code></pre>
  
  <p>Third try:</p>
  
  <pre><code>if(top.location!=self.locaton) {
    parent.location = self.location;
  }
  </code></pre>