Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #19598

Re: Know if element is in iframe

Message-ID <28497692.igfq1cy3Qc@PointedEars.de> (permalink)
From Thomas 'PointedEars' Lahn <PointedEars@web.de>
Organization PointedEars Software (PES)
Date 2013-05-02 21:03 +0200
Subject Re: Know if element is in iframe
Newsgroups comp.lang.javascript
References <ILqdneEisfWLNxzMnZ2dnUVZ_rWdnZ2d@westnet.com.au> <klttu2$m0v$3@dont-email.me>

Show all headers | View raw

Denis McMahon wrote:

> On Thu, 02 May 2013 09:49:32 +1000, Andrew Poulos wrote:
>> I have a page with an iframe. The some elements in the page in the
>> iframe call a function in the parent page and pass 'this' to it eg.
> 
> Is this a frame security thing?

Unlikely here.

> If the content of the iframe is not from the same host as the main page,
> I believe xss security prevents scripts from either manipulating the
> other?

No, the Same Origin Policy (SOP) prevents that if the content of the iframe 
is not _accessed using_ the same URI scheme, _host name_ (that is, domain 
name, regardless where the content is hosted), or port number.

XSS is a related, but different concept; it can be used to bypass the SOP.

<http://en.wikipedia.org/wiki/Cross-site_scripting>

> I've never tried communicating between an iframe and a parent docuemnt,
> but (a long time, several years ago) I wrote some code that happily
> communicated between frames in a frameset - is communication between
> parent and child fundamentally different to that between a frameset and
> a frame's content?

No.

-- 
PointedEars

Twitter: @PointedEars2
Please do not Cc: me. / Bitte keine Kopien per E-Mail.

Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Know if element is in iframe Andrew Poulos <ap_prog@hotmail.com> - 2013-05-02 09:49 +1000
  Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-02 02:19 +0200
    Re: Know if element is in iframe Stefan Weiss <krewecherl@gmail.com> - 2013-05-02 02:32 +0200
      Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-02 02:34 +0200
        Re: Know if element is in iframe JJ <duh@nah.meh> - 2013-05-02 12:31 +0700
          Re: Know if element is in iframe Stefan Weiss <krewecherl@gmail.com> - 2013-05-06 19:57 +0200
            Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-07 10:09 +0200
  Re: Know if element is in iframe Denis McMahon <denismfmcmahon@gmail.com> - 2013-05-02 14:41 +0000
    Re: Know if element is in iframe Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-05-02 21:03 +0200
      Re: Know if element is in iframe Dr J R Stockton <reply1300@merlyn.demon.co.uk.invalid> - 2013-05-03 20:03 +0100

csiph-web