Capture the POST or GET data of an iframe

Question

I have an iframe on my webpage which is on a different domain. I know for security reasons in the browser it's not possible to access the content of that iframe using javascript, but can I detect any POSTs or GETs that take place as the user navigates from page to page of the iframe?

Answer 1

If you own both application you can teach them to communicate with postMessage API: https://developer.mozilla.org/en-US/docs/Web/API/Window.postMessage

With not much work you can create a simple method on iframe side that will tell what is its current window.location .

Answer 2

If you control the server, you can pass back some vars by printing them to parent.yourMethodToHandle() with some server side code. For example:

with php on the child page(in the iframe):

 $post_var = $_POST['var'];
 echo "<script type='text/javascript'>$(function(){parent.yourMethodToHandle('$post_var')});    </script>";

and the JS on your parent page(containing the iframe):

 <script type='text/javascript'>
 function yourMethodToHandle(post_var){//Do things}
 </script>

Answer 3

如果是同一域，服务人员可能会帮助您捕获正在发出的请求，拦截并返回您想要的任何内容。