I am trying to specify the source of an iframe to a blank HTML page. As the source is located on a different domain, I am getting ‘Permission denied’ error. Is there a way for me to inject the HTML source into the iframe to avoid the cross site issue?
Share
having an iframe to another domain usually isn’t a problem, you can prevent other’s from viewing your site in an iframe by setting the x-frame-options’s http header. (And i take you didn’t bother to check the http response header…).
If you just need a blank page, then open the iframe to a page you control. like blank.html located in your doc root.