html js 跨域 p3p-CarlZeng

更新于 2023-10-08 分类于 Javascript 阅读次数：阅读时长 ≈ 3 分钟

动态的创建iframe，然后向里面append DOM元素


var cw = window.frames\['tst'\]; cw.document.open(); cw.document.write('<script>alert("test")<' + '/script>'); cw...</x-turndown>

*   <iframe id="tst" src="javascript:false"\></iframe>
*   <script>
*   var cw = window.frames\['tst'\];
*   cw.document.open();
*   cw.document.write('<script>alert("test")<' + '/script>');
*   cw.document.write('<div>test</div>');
*   cw.document.close();
*   </script>

这段代码可以实现 js动态的创建iframe，然后向里面append DOM元素、JS函数

js动态的创建iframe：

var f=document.createElement("IFRAME");  
f.id = "iframe01";  
f.name= "iframe01";  
f.height=1000;  
f.width=1000;  
f.src='https://system.netsuite.com/app/accounting/transactions/inventory/inventorynumbereditor.nl?l=T&tranid=745&lineid=1'; //"about:blank"  
document.body.appendChild(f);

var header= new Array();  
header\['P3P: CP'\]= 'CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR';  
header\['Set-Cookie'\]= 'test=axis; expires=Sun, 23-Dec-2018 08:13:02 GMT; domain=.google.com; path=/';  
var url ='https://mail.google.com/mail/#inbox';  
nlapiRequestURL(url, null, header);