Home/ Questions/Q 7032685
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-28T00:58:03+00:00

I’m trying to copy information from an iframe to my document, I wrote this

  • 0

I’m trying to copy information from an iframe to my document, I wrote this

<iframe class="Number" frameborder="0" allowtransparency="true">

     <html>
         <body id="wow">002-7375347
              </body>
    </html>

</iframe>


html = $("iframe").find("body").html();
document.write(html);

and it doesn’t work can somebody help me?
Thank you.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You can only do this if the iframe and the document running your javascript have the same origin (same domain, port, protocol, a few other things). This is a security feature called the same origin policy implemented by all major browsers. You cannot really get around it.

    The rationale for this feature is to prevent the following (greatly simplified) scenario.

    1. You go to untrusted site blahblah.com
    2. The site creates an invisibleiframe and points it to your Amazon home page.
    3. You are logged in with the credentials from your browser and blahblah.com goes on to steal all your personal information.

    The policy as implemented is broadly summed up as

    Requests from one origin can execute code from another origin and display it, but cannot programmatically manipulate nor examine their contents.

    So your code can

    • Open an iframe but not be able to examine its contents
    • Include images from google on your page but not be able to read the pixels or send the image back to the server
    • Execute a script from the Google.com cdn but not be able to view anything that code is doing nor be able to get the code itself as a string.

    Exploiting the fact that this is somewhat different to program correctly is a large part of what web hackers do.

    • 0