• window.postMessage - Pro version only. Now the default for new installations.
  • hidden iframe - Show me more infos how the iframe communication way works.
    • ' , 'advanced-iframe'); ?> If the parent page (the page where the iframe is) and the iframe page (the page which is inside the iframe) are NOT on the same domain it is only possible to do the above stuff by including an additional iframe to the remote page which than can call a script on the parent domain that can then access the functions there. A detailed documentation how this works is described here:

    http://www.codecouch.com/2008/10/cross-site-scripting-xss-using-iframes - This plugin does wrap everything that is described there. Simple follow the steps below.

    The following steps are needed:
    1. The parent page has a Javascript function that resizes the iframe
    2. The external iframe page has an additional hidden iframe, an onload attribute at the body and a javascript function
    3. A page on the parent domain does exist that is included by the hidden iframe that calls the function on the parent page
    ', 'advanced-iframe'); _e('

    Using window.postMessage has the following advantages/disadvantages

    One advantage of the iframe communication is that by default you see the callbacks to height.html in the network. So is was always easy to debug out of the box. window.postMessage by default is not visible like that. If you have any problems with window.postMessage select "Debug" at "Use postMessage communication" and log information about the transfered data is printed to the browser console. Use F12 at your browser to open the developer tools.

    When the first version plugin was planned the percentage of browsers that not supported window.postMessage was ~20%. But now this has changed. The latest browser statistics show that IE <= 8 browsers have dropped to ~ 0.2%. And as many websites do not support such old browsers either the new default is now window.postMessage for new pro installations.

    Existing installations can switch to window.postMessage by changing this in the administration and save it. But you still can use the old way as it works fine as well. ' , 'advanced-iframe'); ?>