> For the complete documentation index, see [llms.txt](https://openai.gitbook.io/code-cheatsheets/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://openai.gitbook.io/code-cheatsheets/js/webjs/iframe.md).

# Iframe

Because of same-origin policy on browsers, can use javascript to access DOM elements if not from the same origin

Message passing from iframe to window

Can use window post message or custom events dispatching

```javascript
if ( window.location !== window.parent.location ) {
    console.log("In iframe");
} else {
    console.log("Not in frame");
}
```

## Communicating Between

Inside iframe

```javascript
window.parent.postMessage({ type: "close_spotlight" }, "*");
```

Inside parent window

```javascript
window.onmessage = handlePostedQuestions;

function handlePostedQuestions(packet) {
  const msg = packet.data;
  debug("Recieved packet", packet);
  debug("Recieved msg", msg); //will be {type: ...}
}
```

## DOM

<https://sites.google.com/a/chromium.org/dev/Home/chromium-security/deprecating-permissions-in-cross-origin-iframes>

Deprecated Permission in Iframe unless allowed:

* Geolocation (getCurrentPosition and watchPosition)
* Midi (requestMIDIAccess)
* Encrypted media extensions (requestMediaKeySystemAccess)
* Microphone, Camera (getUserMedia)

```markup
<iframe src="https://example.com" allow="geolocation,  microphone"></iframe>
```