Access parent window from iframe (cross-domain)

Question

I've encountered the task to access parent window from iFrame, if the window in iFrame was loaded from another domain. If I understand correctly, all modern browsers do now allow to do this. So I'm here to find the best solution.

I'm going to accomplish this next way:

I have an overlay with an iFrame within it. This will work instead of pop-ups to prevent pop-up blockers to block my content. The task is to reload the main page when the document in the iFrame finishes some work. In a document, which will be loaded to an iFrame, I will add

<div id="is_closed" class="false"></div>

In a parent window I'll add function, which will be called every second and check if this div still has class name "false". When this will be changed to "true", I'll call some callbacks.

If you have any better solution, please share it with me. Will appreciate any help.

Edit: This is impossible because it's not only impossible to manipulate parent window from child window, but vice versa too. My idea was to manipulate child window from parent window. I was wrong.

Answer 1

but you can change the src attribute of the iframe (adding a #hashtag for example) and listen to the onhashchange event in the child window. Given that you're in position to change both pages.

Answer 2

If I were you I would check out window.postMessage. It may do what you want:

For reference see the following:

• MDN - Window.postMessage
• https://stackoverflow.com/a/3076648/296889 - see the Window.postMessage section

Answer 3

If I understand correctly, all modern browsers do now allow to do this. So I'm here to find the best solution.

This is your solution. What you're asking is not possible.

See related questions:

• How to access parent Iframe from JavaScript
• <iframe> javascript access parent DOM across domains?
• Cross-domain access in iframe from child to parent

EDIT

As mentioned in the comments below, @JeremysAwesome's answer offers a method that would allow cross-domain requests under certain circumstances. See the SO question below for more information.

Ways to circumvent the same-origin policy

Answer 4

set a variable/item in sessionStorage and use it on both sides as you wish. localStorage can do it for longer times.

security risk is someone uses and manipulates this to hijack your side. BUT if someone wants to do so - there will allways be a possibility.

Remember: Life finds a way... ;-)