Path: csiph.com!x330-a1.tempe.blueboxinc.net!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!eternal-september.org!feeder.eternal-september.org!mx04.eternal-september.org!.POSTED!not-for-mail
From: Mike S <mscir@yahoo.com>
Newsgroups: comp.lang.javascript
Subject: Re: cross-scripting issue: use javascript/DOM on iframe loaded from different domain, how?
Date: Sat, 31 Dec 2011 16:01:24 -0800
Organization: A noiseless patient Spider
Lines: 33
Message-ID: <jdo7oi$6h0$1@dont-email.me>
References: <jcopb2$f24$1@dont-email.me> <4ef07168$0$6637$9b4e6d93@newsspool2.arcor-online.net> <5302802.FDOyZ681go@PointedEars.de> <jd398b$mug$2@dont-email.me> <1350245.WGnKmheAe9@PointedEars.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 1 Jan 2012 00:01:22 +0000 (UTC)
Injection-Info: mx04.eternal-september.org; posting-host="ZhM0ScOAXLDSt+8z07l7Eg"; logging-data="6688"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+tAyinMOJis3RzS+5r1lKi"
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20111105 Thunderbird/8.0
In-Reply-To: <1350245.WGnKmheAe9@PointedEars.de>
X-Antivirus-Status: Clean
X-Antivirus: avast! (VPS 111231-1, 12/31/2011), Outbound message
Cancel-Lock: sha1:dPS9H/3y0b/loHPjdat3ItOBgFo=
Xref: x330-a1.tempe.blueboxinc.net comp.lang.javascript:9833

On 12/28/2011 5:50 AM, Thomas 'PointedEars' Lahn wrote:
> Mike S wrote:
>
>> Thanks very much to everyone who posted, I will ask the people who host
>> the page I'm loading into the Iframe to implement the code Bart
>> recommended.
>
> However, the proper code for that approach would be
>    <head>
>      <script type="text/javascript">//<![CDATA[ just in case it is XHTML
>        function selectItem(select) {
>          if (/[?&]E58J([&#]|$)/.test(document.URL)) {
>            select.selectedIndex = 1;
>          }
>        }
>      // ]]></script>
>    </head>
>    <body onload="selectItem(document.forms['selectform'].elements['promo'])"
>      <form action="#" name="selectform">
>        <select size="1" name="promo">
>          <option value="" selected="selected">none</option>
>          <option value="AAA">AAA</option>
>        </select>
>      </form>
>    </body>
> <http://www.w3.org/TR/DOM-Level-2-HTML/ecma-script-binding.html>
> It would be even better if they did not use client-side scripting, but
> server-side scripting to generate the form, and if they generated the
> `selected' attribute specification on a different `option' element if the
> parameter was detected in the document's URL.
> PointedEars

Nice approach, Thank you.