CODEWITHSUNDEEP
javascriptiframessl
Mescalito
Mescalito

Reputation: 2068

javascript permission/access denied accessing parent non-ssl attributes from an ssl iframe

I understand that to access the parent properties of an iframe it has to be the same domain/scheme/ports, but being this only an ssl/non-ssl issue, is there any workaround?

Upvotes: 0

Views: 368

Answers (1)

Quentin
Quentin

Reputation: 943100

No. SSL/non-SSL means a different scheme and a different port.

Worse, if you could do this, then all an attacker has to do is inject some code into the non-SSL page, and that could access the SSL data, rendering it insecure.

Upvotes: 1

Related Questions