Using window.opener.location to access an insecure (http) opening device from a secure (https) popup

I open a popup that is under https from the webpage that is under http. When I try to use the window.opener.location command. (Href / str / port / domain .. etc.) From the pop-up window to get the URL of the opening page, I get the message "Permission Denied". Ive also used Firebug on Firefox to test this. Is there a way I can pass this on using another command or do something else. If I open the opening url under https, then I can access it from a pop-up window. I suggest that this should be due to a secure port versus an insecure port. I thought this should be possible, since I am trying to get information about an unprotected page from a protected page.

Basically, I am trying to scan the URL of an open page and check if it contains a specific substring, I want to perform a specific function. Any alternative suggestions to achieve this will also be appreciated.

+3
source share
1 answer

- . , , . , " ". : URL- window.name, javascript. , URL- , : https://mydomain.com/page.html#http://mydomain.com/parent.html

, SOP.

0

Source: https://habr.com/ru/post/1758304/


All Articles