3 ms·

Nostrademons, when you mention "control both ends of the IFRAME" are you referring to controlling the severs on both ends of the iframe?

• nostrademons 18y ago
  Yeah. If the page source for both the parent frame and the iframe is generated by (or can be changed by) you, it's possible to pass small amounts of information between them (even without using cookies or server-side communication). But I can't go into details about how, because it's company-confidential to one of the places I've worked.
  • title84 18y ago
    got it. so you do not see any way possible of doing this without controlling both sources of the iframe? understand the security implications, but there's got to be some site that does this for other purposes or some way to work around...
    • nostrademons 18y ago
      If there is, I'd expect it to be fixed as soon as someone does it, which'd break your architecture. It really is a potentially gaping security hole, and it's not wise to depend on security holes for your application's core functionality.
  • cousin_it 18y ago
    It's called fragment identifier messaging, and not as secret as you think. :-)