Skip tracking in the heatmap preview iframe

src/app/(main)/websites/[websiteId]/(reports)/heatmaps/Heatmap.tsx

@@ -1043,6 +1043,7 @@ function IframeSnapshot({ snapshot, onReady }: { snapshot: HeatmapSnapshot; onRe
         className={`${styles.snapshotIframe} rr-block`}
         src={iframeUrl}
         title={iframeUrl}
+        name="umami.disabled"
         tabIndex={-1}
         loading="lazy"
         scrolling="no"

src/tracker/index.test.ts

@@ -37,6 +37,39 @@ test('identifies data-distinct-id before the initial page view', async () => {
   });
 });
 
+const loadTracker = async (framed: boolean) => {
+  const script = document.createElement('script');
+  script.src = 'https://analytics.example.com/script.js';
+  script.dataset.websiteId = 'website-id';
+
+  Object.defineProperties(document, {
+    currentScript: { configurable: true, value: script },
+    readyState: { configurable: true, value: 'complete' },
+  });
+
+  const fetchMock = vi.fn().mockResolvedValue({ json: vi.fn().mockResolvedValue({}) });
+  vi.stubGlobal('fetch', fetchMock);
+  if (framed) vi.stubGlobal('top', {});
+  window.name = 'umami.disabled';
+
+  try {
+    await import('./index');
+    await window.umami.track('signup-button');
+  } finally {
+    window.name = '';
+  }
+
+  return fetchMock;
+};
+
+test('does not track when loaded in a frame named umami.disabled', async () => {
+  expect(await loadTracker(true)).not.toHaveBeenCalled();
+});
+
+test('still tracks in a top-level window named umami.disabled', async () => {
+  expect(await loadTracker(false)).toHaveBeenCalled();
+});
+
 test('ignores clicks dispatched on non-element targets', async () => {
   const script = document.createElement('script');
   script.src = 'https://analytics.example.com/script.js';

src/tracker/index.ts

@@ -379,6 +379,7 @@ type MetricEntry = PerformanceEntry & {
     disabled ||
     !website ||
     localStorage?.getItem('umami.disabled') ||
+    (window.name === 'umami.disabled' && top !== window) ||
     (domain && !domains.includes(hostname)) ||
     (dnt && hasDoNotTrack());