Groups > comp.lang.javascript > #19598

Re: Know if element is in iframe

Path	csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.mixmin.net!news2.arglkargh.de!noris.net!newsfeed.arcor.de!newsspool1.arcor-online.net!news.arcor.de.POSTED!not-for-mail
Content-Type	text/plain; charset="ISO-8859-1"
Message-ID	<28497692.igfq1cy3Qc@PointedEars.de> (permalink)
From	Thomas 'PointedEars' Lahn <PointedEars@web.de>
Reply-To	Thomas 'PointedEars' Lahn <usenet@PointedEars.de>
Organization	PointedEars Software (PES)
Date	Thu, 02 May 2013 21:03:20 +0200
User-Agent	KNode/4.8.5
Content-Transfer-Encoding	7Bit
X-Face	%i>XG-yXR'\"2P/C_aO%~;2o~?g0pPKmbOw^=NT`tprDEf++D.m7"}HW6.#=U:?2GGctkL,f89@H46O$ASoW&?s}.k+&.<b';Md8`dH6iqhT)6C^.Px\|[=M@7=Ik[_w<%n1Up"LPQNu2m8\|L!/3iby{-]A+#YE}Kl{Cw$\U!kD%K}\2jz"QQP6Uqr],./"?;=4v
Face	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
Subject	Re: Know if element is in iframe
Newsgroups	comp.lang.javascript
References	<ILqdneEisfWLNxzMnZ2dnUVZ_rWdnZ2d@westnet.com.au> <klttu2$m0v$3@dont-email.me>
MIME-Version	1.0
Lines	35
NNTP-Posting-Date	02 May 2013 21:04:16 CEST
NNTP-Posting-Host	0743284d.newsspool3.arcor-online.net
X-Trace	DXC=PjUK9R@R^R<;]cDoEWD6A4McF=Q^Z^V384Fo<]lROoR18kF<OcfhCO;^lTfTJk=GA6DZm8W4\YJN<b@mF9jNikd5IQbgJMhLo07=GF78S:InU:
X-Complaints-To	usenet-abuse@arcor.de
Xref	csiph.com comp.lang.javascript:19598

Show key headers only | View raw

Denis McMahon wrote:

> On Thu, 02 May 2013 09:49:32 +1000, Andrew Poulos wrote:
>> I have a page with an iframe. The some elements in the page in the
>> iframe call a function in the parent page and pass 'this' to it eg.
> 
> Is this a frame security thing?

Unlikely here.

> If the content of the iframe is not from the same host as the main page,
> I believe xss security prevents scripts from either manipulating the
> other?

No, the Same Origin Policy (SOP) prevents that if the content of the iframe 
is not _accessed using_ the same URI scheme, _host name_ (that is, domain 
name, regardless where the content is hosted), or port number.

XSS is a related, but different concept; it can be used to bypass the SOP.

<http://en.wikipedia.org/wiki/Cross-site_scripting>

> I've never tried communicating between an iframe and a parent docuemnt,
> but (a long time, several years ago) I wrote some code that happily
> communicated between frames in a frameset - is communication between
> parent and child fundamentally different to that between a frameset and
> a frame's content?

No.

-- 
PointedEars

Twitter: @PointedEars2
Please do not Cc: me. / Bitte keine Kopien per E-Mail.

Thread

Know if element is in iframe Andrew Poulos <ap_prog@hotmail.com> - 2013-05-02 09:49 +1000
  Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-02 02:19 +0200
    Re: Know if element is in iframe Stefan Weiss <krewecherl@gmail.com> - 2013-05-02 02:32 +0200
      Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-02 02:34 +0200
        Re: Know if element is in iframe JJ <duh@nah.meh> - 2013-05-02 12:31 +0700
          Re: Know if element is in iframe Stefan Weiss <krewecherl@gmail.com> - 2013-05-06 19:57 +0200
            Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-07 10:09 +0200
  Re: Know if element is in iframe Denis McMahon <denismfmcmahon@gmail.com> - 2013-05-02 14:41 +0000
    Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-02 21:03 +0200
      Re: Know if element is in iframe Dr J R Stockton <reply1300@merlyn.demon.co.uk.invalid> - 2013-05-03 20:03 +0100

csiph-web