chronofwar chronofwar - 1 month ago 12
Javascript Question

Access parent URL from iframe

Okay, I have a page on and on this page I have an iframe. What I need to do is on the iframe page, find out what the URL of the main page is.

I have searched around and I know that this is not possible if my iframe page is on a different domain, as that is cross-site scripting. But everywhere I've read says that if the iframe page is on the same domain as the parent page, it should work if I do for instance:

parent.document.location




parent.window.document.location




parent.window.location




parent.document.location.href


... or other similar combos, as there seems to be multiple ways to get the same info.

Anyways, so here's the problem. My iframe is on the same domain as the main page, but it is not on the same SUB domain. So for instance I have


http:// www.mysite.com/pageA.html


and then my iframe URL is


http:// qa-www.mysite.com/pageB.html


When I try to grab the URL from
pageB.html
(the iframe page), I keep getting the same access denied error. So it appears that even sub-domains count as cross-site scripting, is that correct, or am I doing something wrong?

Answer

You're correct. Subdomains are still considered separate domains when using iframes, so you, the iframe and the main page can never interact with each other.

Comments