Re: frame security

by Jeff Adelsberger <jade(at)edoc.com>

 Date:  Thu, 1 Jun 2000 12:38:17 -0400
 To:  James Pasmantier <parm(at)erols.com>,
"hwg-languages(at)hwg.org" <hwg-languages(at)hwg.org>
 In-Reply-To:  erols
  todo: View Thread, Original
There is some built in javascript security that prevents you from accessing
information about windows (and frames not  within your domain and port
number for that matter). This to prevent nefarious types from fooling
unsuspecting users into dealing their passwords and such out to other sites.

I think there's a way to query the user for permision to do this but its
probably not worth the effort.


At 11:30 -0500 6/1/00, James Pasmantier wrote:
>I have a frameset with a top and bottom frame.  Normally
>accessing Javascript or hidden variables between frames
>works fine.  I'm using:
>
>parent.frameName.document.formName.elementName.value
>or
>parent.frameName.jsValue
>
>However, moving forward we plan to have certain pages in the
>bottom frame loading from remote servers .  In early tests
>I've had difficulty accessing values in the top frame from
>the bottom frame of pages loaded from remote servers.  The
>error in IE 5 that I get is "Access is denied".
>
>I'm assuming this is a security issue, which makes complete
>sense, but I was wondering if anyone can suggest a mistake
>on my part I could look for, or another method to have
>access to these aforementioned values.
>
>Thanks,
>
>    james

-----------------------
   Jeff Adelsberger
 Production Specialist
   Dynamic Diagrams
         Baltimore
phone:     410.694.4149
email:    jade(at)edoc.com
-----------------------

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA