In my scenario an HTML5 page (parent) contains an iframe (child) from a different domain. Ideally I would like to be able to drag an element from the parent into the child.
This works in FireFox but fails in Chrome due to security restrictions (afaik https://bugs.chromium.org/p/chromium/issues/detail?id=251718).
However if I open the same HTML5 page in a different browser instance, drag from there into the iframe of the other instance, then this is allowed.
The reasoning for the security restriction is that the user does not see the URL of the target iframe, but this is true in both scenarios. Why would one work and but not the other?
Sample on http://carsten-leue.de/iframe/cross-domain/
Try to drag drag me
into drop here
. This is not possible in Chrome. Open the same URL in another browser window and drag drag me
from the new window into drop here
of the old window. This works.