Bypass Cross-Domain-Policy to access iframe's HTML with server-side solution

Question

Currently we are trying to access the HTML of (with javascript) dynamically generated html-elements (eg to get the url of an image). If the html-elements are generated with javascript only - their is no problem. Just extracting the image url with javascript by accessing the DOM elements. But now we have trouble with an iframe.

This is the situation at the moment:

• We include external script-file (www.test.com/script.js) to create a gallery on our website
• The script.js generates a new iframe in our website (document.write('iframe code here')); referencing to www.test.com/iframe.html)
• The iframe.html contains javascript-code again to generate the gallery by creating serveral dom-elements (divs, imgs, a, p,....)

Now we need to read the src-attribute of these images. With the debugging tool of the browser, it is no problem. Without the iframe, it's also no problem. But with the iframe, because of the cross domain policy of the browsers we can not access the html of the iframe.html with javascript.

One possible solution was to try to get the src of the iframe tag with javascript, call a server-side script to get the html content of the src-url and run the content via eval()-function on the client again.

I hope you have other better ways to solve that.

Answer 1

从您的问题尚不清楚，但是如果您的应用程序正在提供iframe，则可以使用postMessage来在iframe及其父窗口之间进行通信。