Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It seems there's a typo in the quote, but the following indeed works in both Chrome and Firefox:

    window.frames[0].frames[2].location = "https://example.com";
Even if `window.frames[0]` is cross-origin.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: