Resolution rejected by iFrame IE

Question

I have a website on A.com and an iframe on B.com that calls javascript from A.com. This works great in FF. In IE7 / 8, I get

Message: Access is denied.

message. I checked the HTTP traffic through Fiddler - and I see that it is not blocked in Fiddler?

Any ideas what could be causing this and how to solve it?

Answer 1

If both pages are under your control (i.e. they belong to you and you cn change the code), try this -

http://www.tomhoppe.com/index.php/2008/03/cross-sub-domain-javascript-ajax-iframe-etc/

Set document.domain as follows:

<script type="text/javascript">
document.domain = 'tomhoppe.com';
</script> 

Answer 2

IFrames , " " - . , .

HTML5 . , http://www.w3.org/TR/webmessaging/

http://en.wikipedia.org/wiki/Cross-document_messaging

https://www.owasp.org/index.php/HTML5_Security_Cheat_Sheet#Web_Messaging