Access parent URL from iframe
cross-domain, iframe, javascript
Solution
You're correct. Subdomains are still considered separate domains when using iframes. It's possible to pass messages using `postMessage(...)`, but other JS APIs are intentionally made inaccessible.
It's also still possible to get the URL depending on the context. See other answers for more details.
Problem
Okay, I have a page on and on this page I have an iframe. What I need to do is on the iframe page, find out what the URL of the main page is. I have searched around and I know that this is not possible if my iframe page is on a different domain, as that is cross-site scripting. But everywhere I've read says that if the iframe page is on the same domain as the parent page, it should work if I do for instance: ``` parent.document.location ``` ``` parent.window.document.location ``` ``` parent.window.location ``` ``` parent.document.location.href ``` ... or other similar combos, as there seems to be multiple ways to get the same info. Anyways, so here's the problem. My iframe is on the same domain as the main page, but it is not on the same SUB domain. So for instance I have http:// www.mysite.com/pageA.html and then my iframe URL is http:// qa-www.mysite.com/pageB.html When I try to grab the URL from `pageB.html` (the iframe page), I keep getting the same access denied error. So it appears that even sub-domains count as cross-site scripting, is that correct, or am I doing something wrong?