只允许在iframe内页访问

window.onload = function(){
            if(window.location === top.location){
                alert('禁止直接访问');
                window.open("about:blank","_self").close();
            }
        };