Cross Domain access

[question]

I am working on a page www.abc.com/index.jsp which has an iframe linked to www.xyz.com/index.jsp (both on different domains). My requirement is that on click of a button on the iframe, I need the focus to get back to a section of the page on www.abc.com/index.jsp.
I get a 'Access denied' error when i try the above.

I tried setting the domain of the page www.abc.com/index.jsp to 'xyz.com'. The domain of www.xyz.com/index.jsp is also set to 'xyz.com'. But I noticed that even though i explicitly try to set the domain on www.abc.com/index.jsp, it is not actually set and hence the 'Access denied' error.

Is there a workaround to get this work and remove the 'Access denied' error?

[daveVk]

You are very restricted in what you can do, that said frame busters work cross domain by changing top.location.href

Try changing top.location.hash to required anchor in main page, this will upset your history ( back button ), also try top.location.replace() just changing hash part (avoids history problem).

[Sephr]

Changing top.location.hash is normally not allowed cross-domain. I recommend using making using the Access-Control: header on both domains and use theOtherDomainIframe.contentWindow.postMessage('message contents', 'target domain') and set event listeners for 'message' if you must do cross-domain communication.

[daveVk]

I think postMessage may only be supported by mozzilla ?

Google for "cross domain ajax" for more ideas

[Sephr]

postMessage is supported by Firefox 3+, Safari 3.1.2+, and IE8 beta 2