document.domain property
Due to raising security concerns on the web as a whole the Internet Explorer Security
has been tightened in the PP2 release of IE 4.0. The following is a mock-up of how one would
create a web page so that it can "talk" (access the object model) to a frame or inline-frame and vice-versa
For Example: If this page were being loaded from http://www.microsoft.com
and we wished to access the HTML of the IFRAME with parent.frames(0).document.all.myBody.innerHTML
and the IFRAME contents were coming from http://sbn.microsoft.com.
You must do two things.
- Set the document.domain property to the domain in common to both
in this case document.domain should be set to "microsoft.com"
- The document.domain propert MUST ALSO be set to "microsoft.com" in the FRAME
or IFRAME that is on the Main page
NOTE: This specific example will not work since these pages are not residing on the
servers that the document.domain property is set to.
<![CDATA[
This is how the script in the parent frame should be:
<iframe border=1 src="http://home.microsoft.com/" width=200 height=200 ></iframe>
<script>
function go() {
document.domain='microsoft.com';
parent.frames(0).document.all.myBody.innerHTML
}
window.onload=go;
</script>]]></plaintext></body></div>