Javascript Access Document in Internet Explorer Cross Domain / Disable "Same Exit" Setting

I have an intranet site kiosk that needs to open a pop-up window to another site in another domain. I want to know if they are actively working with this popup, and if not, close it after a certain period of time.

I need to access popup.document after the window.open JS command. Due to cross-protection of the domain and the same origin policy, I cannot.

Google chrome can disable this explicitly using the --disable-web-security flag. I tried using the Answer here , but it does not seem to work. When debugging in a visual studio, I get "Access denied." Currently using IE10.

TL DR How can I access a popup document opened with javascript window.open and disable IE10 policies of the same origin for a trusted site.

I do not have access to change anything on the server of other sites , this is an affiliate site. In addition, I tried to enter the security tab and disable protected mode and enable all settings (disable the Xss filter) for Internet / intranet / trusted sites. This does not work.

No one is reading this question. I do not have access to change another site. who voted me, both suggest that I do it. If I could change another site, that would be easy. This is a question of browser security settings.

+3
3

, , JSONP .

randomSessionKey

. var skeyval = Math.random() * 100000; window.open( "otherdomain.com?rsKey =" + skeyval, "MyWindow" );

, JSONP, skeyval JSONP ( ).

, , , ,... , "rsKey", , : active, idle.

+1

JSONP , JSON API, PayPal, cookie. , .

You can use this to communicate between your site and a remote site (provided that you have control over the remote site, if you do not, you are just out of luck). Your server can send requests to the remote site for the status of a specific user, and the remote site can update this status of the user each time it provides input. If your site requests a remote site and the remote site is idle, you can close the remote access window (the easiest way is if you use an iframe, partial view, or something similar).

0
source

All Articles