The simple setting, most seem to be overlooking, is don't allow third party cookies. Voila.