A: 

I would expect the unexpected when rendering on top of an iframe, similar to when a div is positioned over a flash video. It can work, and sometimes does. But scrolling or movement in the flash or iframe can trigger some rendering issues.

Is there any chance you could use a different solution then the iframe? Would using a library like cURL to get the data off a different page suffice?

alex
Thanks for your reply!No, we can't get away without an IFrame, we want to let users use the other site inside ours. Proxying it through cURL will break most modern sites, since a lot of them depend on Javascript working for a lot of their functionality.I agree that drawing over an IFrame is "weird". I didn't even expect the z-index to work when I first tried it, but in truth, all the other browsers behave PERFECTLY, even crappy IE6...
Daniel Magliola
Well, I guess it depends on how many users use Safari vs How bad you want people to use this functionality. cURL can still work with JS.. loop through the external references and make them absolute paths. Of course, this method is not a good way either. Just a suggestion.
alex
Yeah, that's a security disaster waiting to happen... :-)Plus looping through the external references is an ideal-word solution. Lots of site include JS dynamically by doing weird Response.Write's, adding <script> elements, etc. But above all, it's a big security hole i'm not willing to try to close by myself (like Facebook does with their FBJS)
Daniel Magliola
Isn't response.write part of ASP? cURL can only get what is outputted to the browser.
alex
+1  A: 

Oh! Fun! It's been reported as a bug already :-(

https://bugs.webkit.org/show_bug.cgi?id=25216

Daniel Magliola