Access-Control-Allow-Origin not working for iframe within the same domain
Question
I'm trying to access an iframe within a subdomain and get a cross domain error.
Here is the code of example .mydomain.com/iframe_test.html:
<html>
<head>
<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js"></script>
</head>
<body>
<iframe src="http://example2.mydomain.com/welcome.php" width="1000" height="600"></iframe>
<script>
$(document).ready(function()
{
setTimeout(function(){
$('#innerdiv',$('iframe').contents()).hide();
},5000);
});
</script>
</body>
</html>
And here is the code of example2 .mydomain.com/welcome.php:
<?php
header("Access-Control-Allow-Origin: " . "*");
?>
<html>
<head>
</head>
<body>
<div id="innerdiv">
hello
</div>
</body>
</html>
When the line $('#innerdiv',$('iframe').contents()).hide() is executed, the following error occurs:
Uncaught SecurityError: Failed to read the 'contentDocument' property from 'HTMLIFrameElement': Blocked a frame with origin "http://example.mydomain.com" from accessing a frame with origin "http://example2.mydomain.com". Protocols, domains, and ports must match.
I checked with Fiddler that the Access-Control-Allow-Origin header was really returned in the response of welcome.php
Is it possible to access the contents of an iframe within a subdomain?
2 answers
solution1
25 ACCPTED 2014-04-29 11:12:54
Access-Control-Allow-Origin is used only for XHR.
What you need is called Same Origin Policy .
You have to add document.domain = 'example.com' to your pages.
solution2
-1 2020-02-07 14:36:28
I found this solution about "Access-Control-Allow-Origin" in custom.unified.js with divi theme wordpress and i corrected by put this condition
if (window.parent != window.top) {
window.top && window.top.__Cypress__ ? r = window.parent === window.top ? window : window.parent : window.top && (r = window.top, window.top, window.self)
}
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.