ansaurus

Question

Detect when iframe is cross-domain, then bust out of it

Answer 1

+3 A:

You can do A, since if you get a security error (which you can catch), that's means they're cross-domain :) Then you can resize the iframe to be the whole page. But I think you're right you can't actually bust out, without explicit cooperation from the other domain.

EDIT: You're right you don't need to poll. Here's the basic code:

<html>
<head>
<title>Cross-domain frame test</title>
<!-- http://stackoverflow.com/questions/2365822/detect-when-iframe-is-cross-domain-then-bust-out-of-it/2365853#2365853 -->
<script type="text/javascript">
function checkForCross()
{
  var iframe = document.getElementById("myFrame");
  try
  {
    var loc = iframe.contentDocument.location.href;
  } catch(e)
  {
    iframe.setAttribute("style", "border: 0; margin: 0; padding: 0; height: 100%; width: 100%;");
  }
}
</script>
</head>
<body>
<iframe name="myFrame" id="myFrame" src="child.html" style="height: 50%; width: 50%;" onload="checkForCross()"></iframe>
</body>
</html>

Matthew Flaschen 2010-03-02 18:59:24

I'll test the try/catch approach.. I always forget that JavaScript supports that :) Polling isn't necessary though, since I can just test it each time the iframe's onload event is fired.

Emmett 2010-03-02 19:07:16

This definitely works and demonstrates that A is possible. Unfortunately B still seems impossible -- expanding the iframe works, but it's still wonky because the url in the browser's location bar won't match the site being displayed.I'll try to play around a bit with solutions involving modifying the the links that the other answers suggest, e.g. attaching a click handler to every link that checks if the href attribute is cross-domain.

Emmett 2010-03-02 20:35:44

Emmett, the click handler works, but only for /your/ links, not links within the iframe.

Matthew Flaschen 2010-03-02 20:48:28

Answer 2

A:

set the 'target' attribute on external links to '_top'.

kennebec 2010-03-02 19:17:38

ansaurus

tags:

views:

answers:

Detect when iframe is cross-domain, then bust out of it

related questions