Is it possible to find a cross-domain iframe's new URL after a redirect? -
I am trying to post on the login form of an application on the other subdomain of my site. This is a third party app that I do not have access to the source.
I know that you can not access lots of cross-domain iframe features I just need to reach everyone, however, it is a URL that has been redirected within the IFrame (via Javascript). There is a session token in it that I want to pass.
Something looks like that can be adequately safe, but I have not found any way to do this so far. I am using jQuery, and I have tried the $ ('iframe'). Content () , but I do not think there is any permission on that object. I can not get the value of $ ('iframe'). Attri ('src') has also been checked, but does it remain in the form of a pre-redirect URL, is there any other way?
No, you do not have access to > properties within an iframe You only have access to external positioning and styling properties.
That is why Frames work with such pain. I usually only use them if I do not care what's done within them.
Can not you pass server-side authentication and tokens? Instead of authenticating the client, can not you do this on your server? You may need to do some additional work to create an HTTP request and analyze the response, but you avoid any iframe problems.
Bottom line iframes is probably not the best to rely on (especially when it comes to cross-browser functionality for important things like authentication).
Comments
Post a Comment