Pretty much every exploit related to embedding third party code in a frame has long been closed.
Reply on news.ycombinator.com