1

Getting directly the current iframe's URL, in javascript, is not possible due to security restriction. Is there a way to override this restriction?

  1. Using ActiveX control?

  2. Changing the browser's security options?

  3. Using HTML5?

  4. Using flash?

  5. Using server side scripting?

David
  • 34,223
  • 3
  • 62
  • 80
joval
  • 11
  • 1
  • 2

2 Answers2

2

Getting directly the current iframe's URL, in javascript, is not possible due to security restriction

If you mean cross-domain IFrames, and you have no way of controlling the inlying page, then this is correct.

As far as I know, no, there is no way to get around this.

The only way I can think of - and you don't want to go down that road - is proxying every page inside the iframe through a local server script, rewriting every link and action within each page to go through the proxy, too. But that is hugely difficult, comes with a shitload of things to be aware of, and is not a real option - many modern sites will simply break if proxied that way.

Pekka
  • 442,112
  • 142
  • 972
  • 1,088
0

As I understand it if you have no control of the frame you are not supposed to know what is going on in this frame. So, knowing it would be a security bug and should be fixed. Browsers are designed to not allow the page spy on what you are doing in another page.

If you have control over iFrame there are some options for you

There is a discussion here: How do I get the current location of an iframe?

basically var iframe = document.getElementById('loader').src

You can actually get the location if iframe is located at the same server. If it is located at a different server the only way to go is to rewrite URLs like some sites do. It is not easy to do though

You can also do HTML5 cross-window communication: http://ajaxian.com/archives/cross-window-messaging-with-html-5-postmessage

Community
  • 1
  • 1
Roman Goyenko
  • 6,965
  • 5
  • 48
  • 81
  • 1
    `src` will give the *initial* URL of the iframe, but will fail if the URL has changed in the meantime – Pekka Nov 02 '10 at 18:52