Dynamically Set Document.domain To Iframe

February 22, 2024 Post a Comment

I have an iframe that injects in pages, called him 'helper'. So due to same origin policy I need to set iframe domain the same is parent window domain. But I can't get access to pa

Solution 1:

I do not know if it will help but i use this in iframe

try {
    var domainName = window.parent.parent.iframeData.domainName;
}
//Access violationcatch (err) {
    document.domain = window.location.hostname.replace('www.', '');
}

So i check if domain already set we have exception ang try to guess domain, in either case, there is no need to set a domain

EDIT: More correctly to use post message to set domain if needed

Solution 2:

In short, it can't. Setting document.domain only works when the iFrame and containing window are actually part of the same domain. If a browser were to let you set document.domain to something other than the domain you were actually on, it would be a security violation. Consider, any malicious script could just say 'No really, trust me on this one' and the browser would essentially be saying, 'Oh, okay, since you asked so nicely, here's all the permission you want'.

document.domain can only be set to a parent domain of the actual domain of the page. If an iFrame and a containing window don't share at least that, then no browser will allow them to cross talk.

Unless I've misunderstood your question. Feel free to post some examples to clarify.

Solution 3:

Assuming you parent can be a.domain.com and your iframe is b.domain.com - then you can do what your are attempting. If you MUST know what the parent is, pass it in the iframe src attribute or try document.referrer