Is a subdomain considered cross-domain?

Question

Is http://nonsecure.form.xyz.org and https://secure.form.xyz.org a different domain? I ask about this because my javascript in safe cannot call it parent. The secure domain is inside the unsecured domain through an iframe.

EDIT

Conclusion

You can execute cross-domain scripts, but you cannot execute cross-protocol scripts (for example, https and http)

+8

javascript html

Jaspero Sep 26 '11 at 10:19

source share

1 answer

Daniel Brockman · Accepted Answer · 2011-09-26T22:22:05+0000

What you can do here is set document.domain = "form.xyz.org" on both sides before attempting to execute cross-domain scripts.

However, you cannot cross-script between different protocols.