Security, XSS attack with iframe bypassing weak same-origin-policy

[fix]

If in your dapp index.html you include this single frame

<iframe name="attackit" src="/"></iframe>

The dapp has access to the main dashboard using for instance:

$('[ui-sref="main.contacts"]', frames['attackit'].document)

And basically script whatever action in the LISK dashboard...

It is possible to prevent this by using a combination of those ideas:
http://stackoverflow.com/questions/2896623/how-to-prevent-my-site-page-to-be-loaded-via-3rd-party-site-frame-of-iframe