5

I have a site on A.com and an iframe on B.com which calls javascript from A.com. This works great in FF. In IE7 / 8 I am getting a

Message: Access is denied.

message. I have checked the HTTP Traffic via Fiddler - and I can see that it isn't blocked in Fiddler ?

Any ideas what could be causing this and how to solve?

i_am_jorf
  • 53,608
  • 15
  • 131
  • 222
Tom
  • 59
  • 1
  • 1
  • 2

2 Answers2

4

If both the pages are under your control (i.e. they belong to you and you cn alter the code), try this -

http://www.tomhoppe.com/index.php/2008/03/cross-sub-domain-javascript-ajax-iframe-etc/

Set document.domain like this:

<script type="text/javascript">
document.domain = 'tomhoppe.com';
</script> 
Hemant Tank
  • 1,724
  • 4
  • 28
  • 56
2

IFrames can communicate as long as they are "of the same origin" - so same domain and same protocol. Communication is blocked if they are of different origin.

HTML5 introduces a new communication mechanism. It may be worth looking at http://www.w3.org/TR/webmessaging/

http://en.wikipedia.org/wiki/Cross-document_messaging

It is also worth reading up on the security implications

https://www.owasp.org/index.php/HTML5_Security_Cheat_Sheet#Web_Messaging

Richard Corfield
  • 717
  • 6
  • 19