18

I need to get notified whenever a user clicks a link on a page in an iframe that is not from the same domain. I'm aware of xss restrictions, however all i need to know is the current page being served in the Iframe. Is there a way to do this without violating xss rules?

Micah
  • 111,873
  • 86
  • 233
  • 325

4 Answers4

40

To get the iframe location using jQuery:

alert( $('iframeId').contents().get(0).location.href );
Jason Aller
  • 3,541
  • 28
  • 38
  • 38
user237119
  • 409
  • 4
  • 4
  • 1
    this doesn't work for me – knocte Mar 25 '12 at 23:23
  • 8
    this works only in the case of a same domain -- xss security prevents it for different domains – Alvin Nov 30 '13 at 20:49
  • Note, if the js is running *inside* the iframe, selecting the iframe like that won't work, but selecting it like "$('iframe', window.parent.document)" does. (Still assuming the same domain.) – neminem May 12 '15 at 17:40
9

If not for cross-site scripting restrictions this should work. Unfortunately I don't know of a way to get the URL without violating these restrictions.

<html>
    <head>
        <script type="text/javascript">
            function GetIFrameUrl()
            {
                alert('url = ' + document.frames['frame1'].location.href);
            }
        </script>
    </head>
    <body>
        <a href="#" onclick="GetIFrameUrl();">Find the iFrame URL</a>
        <iframe name="frame1" src="http://www.google.com" width="100%" height="400"></iframe>
    </body>
</html>
joshuapoehls
  • 32,695
  • 11
  • 50
  • 61
5

You can easily do it with vanilla js.

  • Query the document for an element with the specific name, id, class or whatever
  • Get the source for attribute for that element

     //Get by Id
     var frame_src = document.getElementById('myIframe').src
     //Get by tag name - get the first
     var frame_src = document.getElementsByName('frmExternal')[0].src
     //Alert 
     alert(frame_src)
    
raam86
  • 6,785
  • 2
  • 31
  • 46
1
  <script type="text/javascript"> // if window open in iframe then redirect to main site
         if(window.top.location != window.self.location)
         {
            alert(window.self.location);
            // top.window.location.href = window.self.location;
         }
    </script>
Sandeep Sherpur
  • 2,418
  • 25
  • 27