iframe automatic height adjustment using HTML5 cross domain web messaging

Posted on by

Yesterday I was working on a site that needed an iframe embedded in the page whose content came from a completely different domain. I try to steer clear of iframes at all costs normally so forgive me if what I’m about to say is pretty obvious.

I didn’t want the content in the iframe to appear as though it was in an iframe, so obviously I stripped off all the default browser styles…well, the border. I wanted the iframe to be as high as the content it was containing so that no scroll bars would appear.

So what I did was just give the iframe a height, however when the user navigated to a different page within the iframe, the height I had previously set was too big or too small.

I instantly thought “right, JavaScript will sort this out for me!” and proceeded to quickly code up a function that would inspect the scrollHeight of the content in the iframe and adjust the iframe height accordingly.

No! Said cross domain policy. I had momentarily forgotten all about that. Since the iframe content came from a different domain, I wasn’t allowed to access the document object of the iframe (or vice versa).

Here is how not to do it

Firefox says “Error: Permission denied to access property ‘document’” and other browsers similar.

I started searching for some kind of workaround.  Of course there isn’t really one…except I did find an interesting hack for Firefox. Which is – an iframe document can alter the url fragment of the parent window’s location object! ha madness.

The idea is that the document in the iframe alters the url fragment to read:

http://freestyle-developments.co.uk/blog/?p=150#138

Where 138 is the height of the iframe document (obviously you could be a bit more fancy and send other parameters and name them e.g #height:138 but for simplicity I’ve just set the value). The parent then reads this value and sets the iframe height accordingly:

var iFrameHeight = parseInt(location.hash.replace('#', ''));

So…yeah, that’s pretty interesting, but not really a solution. Check out the example implementation here.

Anyway, what to do? HTML5 web messaging to the rescue! Sweet! HTML5 web messaging is cross domain messaging done right. Not only does the messenger choose who should receive messages, but the recipient also chooses who to receive messages from.

The idea is that after the iframe document has loaded, it sends a message to the parent window telling it what it’s scrollHeight is. The parent listens for messages, and sets the height of the iframe when it receives a message.

A couple of things to note:

  1. There has to be communication between the two documents. i.e. the document on the external domain needs to actively send this message. Which can be a complete show stopper if you have no control over the document on the external domain
  2. This isn’t going to work on IE < 9. I tested the implementation linked below is working on FireFox 4 (Beta 7), Safari 5.0.2, Chrome 8, Opera 10.63 and Internet Explorer 9 Platform Preview 7. Which is a pretty good spread to be honest

Check out the example HTML5 web messaging implementation here.

61 thoughts on “iframe automatic height adjustment using HTML5 cross domain web messaging”

  1. Hi,

    I have a public facing SharePoint 2010 site.

    Scenario: We are using cross scripting to show external sites information in our, site. We have pages with a Page Viewer web part ad CEWP. Height and scrolling issue of Page Viewer web part is resolved using cross scripting.we followed the below blog to resolve. and also your blog. in both the case its resolved

    http://blog.johnmckerrell.com/2006/10/22/resizing-iframes-across-domains/

    i want to make 100% sure that no search enginer like Google will mark our public facing SPSite as phishing site due to this cross site scripting??

    If you anybody want me to elaborate my question please let me know.

    Regards

    Guru

  4. Yes alan. you can view the source view of the blog.. same scripts i have copied and tried with my blog. i m not getting whats the problem with IE9 and firefox. in firefox its gives a wrong hieght, in IE9 it wont work at all. have followed something wrong or maybe that blog has internal few more iframes?
    what is the work around if i want to set the hieght of a single iframe with id.
    need guidance and help
    regards
    Guru

  6. Hi i tried to use your code, saved your page as a test my server

    http://myoldmac.net/MacFinder_share/iframecode3test.html

    i have not changed any code – now it does not display the message and does not resize. How do i get it to run ?

    I tried to include my page within the iframe but it does not resize.

    Because on your page it works, what do i wrong ?

    I try to get a code to implement this page on other pages:

    http://myoldmac.net/MacFinder_share/

    Thre problem is that it includes linklists with different heights and i need dynamic resizing. Thank you for any help!

  8. @Oliver – In your first comment your iframe is using the html file hosted on my domain, whose call to the parent.postMessage function explicitly states that it can only post messages to the domain http://www.freestyle-developments.co.uk.

    In your second comment I can’t see the JavaScript in your iframe that posts a message to the parent. i.e. using parent.postMessage

  9. Dear Alan, thank you for your fast response!

    i have added now the “function sendScrollHeight() {…” code and the code to the page that should be loaded in the iframe.

    All ULRs point now to my domain but it seems there is still an error in my code because it still displays no message. Could you please have a look?

  10. Dear Alan, now it works in Safari and Firefox (cool!), when i click on Apple ][ Links the page increases correctly, but when i go back to a page with less height (Back to index) it does not reduces the height, there is a big unused area below the content. Is there a way to resize the page to smaler content ?

  11. Pingback: Iframe sets | Supergetawayde

  12. The associate payment portion is approximately 53% of
    net earnings, which is the highest of any public network
    marketing business. The groundwork of the Usana top secret dietary technique is the Essentials,
    of vitamin, antioxidant, and mineral dietary dietary supplements and utilizes much more than
    24 vitamins and minerals. If you do become hungry between meals be sure to consume fruits and vegetables.

  13. The warm market list and bugging old friends on facebook is not going to be the best way to grow a
    business. All clients get turned off when they see a long list of things to answer.
    If you can’t get ahead yourself in a short
    amount of time, either the so-called ‘system’ you are using
    is not effective or YOU are not effective.

  14. Dentist would certainly prescribe heating
    repair an individual on basis of one’s previous problem and treatments.
    You heating repair must choose a plan that has few restrictions on this aspect.
    They will last for decades so long as the teeth are pulled.
    Apart from raising concerns regarding the anticipated costs of your
    specialised teeth whitening service, you will have to do all the work, said Dr Nelson.

  15. Howdy! I know this is kinda off topic but I was wondering
    which blog platform are you using for this site?
    I’m getting tired of WordPress because I’ve had issues with hackers and I’m looking at alternatives for another
    platform. I would be great if you could point me
    in the direction of a good platform.

  16. 0 design ideas and web programs to make your online business appear better and
    allow better interaction between you and also the visitors.
    If you are like most people you have noticed that the job market is not too encouraging and
    job security is becoming obsolete. But you must have a proper knowledge of the business before you start it.

  17. People today usually are knowledgeable about almost everything thanks to
    the shocking advancement throughout devices. Nowadays
    a large number of effectively conscious of the particular corollaries regarding lazy lifestyle your cardiovascular vascular troubles, the probable
    coronary heart assault, fatness and so on. Still most of us just are not able
    to subscribe to an every day exercise routine technique, for we all suffer from shortage of
    their time. The most effective Home fitness center is made don’t forget the needs connected with an individual whilst your total loved
    ones. A house perform station lets you determine inside best privateness of your dwelling, more than likely making the most of a popular animation over tv as well as as well
    as tuning straight into your very best self music route.
    You are able to wander for the treadmill at any time
    in the day in the almost all satisfied attire in addition to provided you desire.
    Previous to acquiring, the actual watch of obtaining a property health club in your house
    seems to be rich in claims. Yet should you invest in with no correct preparing,
    your entire thing does not arrive at any kind of sensible
    use. And so you should think about Home fitness space Evaluations before buying a home exercise space.

  19. Hmm it looks like your website ate my first comment (it was super long) so I guess I’ll just sum it up what I submitted and say, I’m thoroughly enjoying your blog.
    I as well am an aspiring blog writer but I’m still new to
    the whole thing. Do you have any tips and hints for rookie
    blog writers? I’d definitely appreciate it.

  20. Please contact me at my email address below for any comments or questions you might have.
    If all else fails, the WP-Mal – Watch Word – Press hacker alert plugin will do
    just that: it lets you know when hackers have already been mucking
    about inside your Word – Press install. Overall, Dynasty Warriors:
    Strikeforce is definitely built for multiplayer support.

  22. Thank you for sharing your thoughts. I truly appreciate your efforts and I will be
    waiting for your next write ups thanks once again.

  23. For comparison, a hair on your head is about 80 microns.
    In general the ionic and germicidal purifiers emit
    little to no noise, they are compact in size and best of all- no
    filters to change. They take up much less power and therefore marginal electric
    charges.

  24. What’s up, I read your new stuff on a regular basis. Your writing style is awesome, keep it up!

  25. The possibilities are endless and my tan would surly benefit from the warm sun.

    Many of the cars I see are premium quality; Range Rovers,
    BMW’s, Toyota 4Runners, and the like are quite common.
    During winters Ladakh gets hard to commute,
    even for the locals.

    Here is my homepage appartement vacances (http://www.casitamoabi.com/)

  26. Just lately a colleague of mine brought up to me he was
    utilizing an anonymous Proxies 20122012 in order to access and engage in on the internet roulette game titles.
    &nbsp The huge problem and it is a extremely huge
    dilemma is that all your info is actually passed through this Proxies 20122012 server usually completely
    unencrypted – the knowledge is basically forwarded to it’s vacation
    spot. If you really don’t start honing your survival expertise now, you are going to be helpless and hopeless when 2012 happens
    and chances of you generating it alive gets to be slimmer.

    My homepage annuaire avocat versailles (http://www.avocat-alexandre.fr/activites-dominantes-avocat.php)

  27. Mom is a very honorable and busy title to hold,
    so treat mom to a the relaxing scent, warmth and comfort of Laura’s favorite candles at home and on-the-go.
    Some evidence indicating that continous green tea drinkers
    have low chances of heart disease and developing any type of cancer.
    It achieves a flawless, luminous complexion that provides light to medium coverage,
    superior antioxidant and sun protection, and instant hydration.

    Here is my homepage: thé maison

  28. Hair transplant and hair weaving experts are riding the boom of hair loss as hair
    form a ambient part of the human face. Additional Resource
    - Yoga Marseille, Massages Marseille, Soins du Corps Marseille, Ayurvediques Massages Marseille,
    Massages Ayurvediques Marseille, Soins du Visage Marseille -.
    People suffering from osteoarthritis or rheumatoid arthritis will see a noticeable
    improvement in their stiffness, pain, and other arthritic
    symptoms by practicing yoga poses and postures.

    Here is my web page :: Sécurité informatique et video surveillance dans le paca

  30. For a successful web internet site often decide on a premium WordPress theme.
    Tout comme leurs homologues d’origine, le Replica Watches Omega sont disponibles dans un large .

    Marsha’s husband drove us to the Invalides, the Eiffel Tower and the Opera
    House to see them in their glittering, nighttime splendor.

    my web site :: bordeaux

  31. Anyone who is unable to take medications because of easy reactions to side effects
    have to think about this and also consult their doctor.
    Please note that if you take more of Viagra then this could damage your
    penile muscles and resultantly your penile functioning would be damaged permanently.
    Facial flushing where the blood vessels to the face dilate causing redness, is also considered
    to be quite common.

    Feel free to visit my homepage: medicaments

  32. Butter LONDON is a pretty treat for mom on her special day.
    T3′s Single – Pass Flat Iron looks gorgeous (handle is full of bling) and will give a polished and straight with just one single pass, so hair looks like you just walked out of a salon even
    on a wet spring day. In japan green tea is considered as
    “tea” only among the large mass.

    Also visit my web site – the vert japon – http://www.letheier.fr,

  33. At a fraction of the price of a 90′ TV you can get this miniature projector for about $400-500
    and take it with you where ever the next party takes you.
    If the road is wet, you should push both brakes to
    the max simultaneous. Any data entered on one handset will also appear on all registered handsets.

    my site moto-intercom.com

  34. poussoirs ressort
    My spouse and I stumbled over here coming from a different page
    and thought I should check things out. I like what I see so now i
    am following you. Look forward to going over your web page yet again.

    my weblog: boutton poussoir

  35. I’m really impressed along with your writing abilities and also with the layout inn your weblog.
    Is thaat this a paid theme or did yoou modify it
    yourself? Either way keep up the excellent high quality writing, it is uncommon to see a nice weblog like this one today..

  36. Just want to say your article is as astounding.
    The clarity in your post is simply nice and i can assume
    you’re an expert on this subject. Fine with your permission let
    me to grab your feed to keep up to date with forthcoming post.
    Thanks a million and please carry on the enjoyable work.

  38. Just dig deep, pick yourself up and brush yourself off
    that sixth time. By changing my diet and lifestyle (in a healthy manner) I have been able to lose 30lbs,
    fit into smaller clothes, and get more active. Users will also be exposed to ‘ab interval’ exercises.

  39. what are some really good and popular websites for blogging? ?? . ebfdfdegccfb

  40. Lastly; find a toy that will appeal to the toddler’s interest.

    These arcade machines are very popular to play, but on the outside of the unit.
    The biggest factor that needs to be kept in mind is the quality.

  41. Say for instance you knew that you wanted a green costume.
    Teeth need months under the right conditions to regenerate and
    these conditions sometimes can be tricky to maintain even with the information I am presenting here.
    Meanwhile, according to their own circumstances and
    the surrounding environmental conditions, given the different distress signals.
    Some have R and B roots, but not what is termed R and B
    these days.

    my blog canada green grass seed reviews – Nate
    -

  43. This post will help the internet people for setting up new website or even a weblog from
    start to end.

  44. So its quite essential to insert a background tune to fetch an extraordinary touch for your assignment.
    Smart Home, English as Smart – Home, is home for the platform, both the architecture,
    network communications, information appliances, equipment, automation, collection system, structure, service and management as one of the
    efficient, comfortable, safe, convenient, environmentally friendly housing environment.
    Music can be considered as one of the integral components of our life.

    My web blog video music [Dulcie]

  45. )Do you seriously want to take your Visalus home
    business to a new level. Food being part of the physiologic needs of people should be taken with some sort of discipline.

    Right after reading this Vi – Salus evaluation you are most
    likely thinking that Vi – Salus is an excellent opportunity as well as
    are ready to get started.

  46. Often times, if you’re not mindful, you could spend excellent
    money on the incorrect book. For far better or
    worse, it also suggests going back to school.
    Recalling at my high school and college years, I in fact made some of the most effective acquires of my life.

  47. You really make it seem really easy together with your presentation but I find this topikc to be
    realky one thing whichh I believe I’d never understand. It
    sort of feels too complicated and very extensive for me.

    I’m having a look forward in your next submit, I will
    attempt to get the grasp of it!

  49. I savor, lead to I discovered exactly what I used to
    be having a look for. You have ended my four day lengthy hunt!
    God Bless you man. Have a great day. Bye

  50. I’d like to change some money ebiza l online “Members of Congress were not really aware … about what these programs were being used for, the extent to which they were being used,” Amash told “Fox News Sunday. “He’s a whistle-blower. He told us what we need to know.”

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>