Does FareHarbor support URL masking?
Last updated: September 23, 2022
URL masking, also known as domain masking or link cloaking, allows you to display a specific URL in your browser’s address bar while loading another website’s content. It can also be used to keep a static URL (for example, www.mywebsite.com) in the address bar when users are navigating to different parts of your website (such as www.mywebsite.com/booking).
Please note that FareHarbor does not support URL masking. To protect you and your customers against clickjacking attacks, we use an extra level of security called an HTTP response header (X-Frame-Options: SAMEORIGIN), which tells web browsers to only display FareHarbor’s content in a frame that has the same origin as the page itself.
Because URL masking uses a frame to display a different website than the domain (origin) in the browser’s address bar, the X-Frame-Options header will prevent FareHarbor from being displayed when URL masking is used.
Note: Some older browser versions may not support the method outlined above. In these cases, FareHarbor uses “frame-busting” Javascript to ensure content is not vulnerable to clickjacking or other malicious activity.
Internal-only content. Don't copy and paste to anyone.
The security measures outlined in this doc are used on all FareHarbor embeds and FareHarbor Sites, as well as the FareHarbor marketing website. The only exception is the Lightframe itself, because we need to be able to load it on top of non-FareHarbor websites. This means that technically someone could insert a frame inside the Lightframe for malicious (or non-malicious) purposes. Under no circumstances should the Lightframe be used in this way, however, as it may break in the future.