[Lemon]

I doubt that you can attach an element created in one DOM tree to another tree within the iframe. Assuming all the origin stuff checks out, try something like this maybe:

<script type="text/javascript">  
                var theframedoc = document.getElementById('html').contentWindow.document;
                var cssLink = theframedoc.createElement("link") 
                cssLink.href = "themes/candybar.css"; 
                cssLink.rel = "stylesheet"; 
                cssLink.type = "text/css"; 
                theframedoc.body.appendChild(cssLink);
</script>

[arronhunt]

Thanks lemon. I got it to work, see above update.

[Lemon]

How did this even what the heck...the server told me that post got rejected because the thread was hidden? Someone's stealing my packets or a new IPB feature

[NeilHanlon]

I'm going to guess all the times you're returning because i is length is when it's skipping over..

Try something like:

for(var i=0;i < frames.length;i++){

}

[Lemon]

Above is the correct adaptation. Essentially, don't use for...in on an array or nodelist, it's meant for use on objects to enumerate the properties/methods rather than the contents of arrays. This means when you try to use it with an array you'll get all the properties that make up the array object too such as 'length' and probably 'prototype' as well.

Edit: This page covers this well: http://stackoverflow...-in-with-arrays

If you are targeting modern browsers only you also have the option of the Array.forEach method. If not, you could always make use of a shim to add it to older browsers.

[NeilHanlon]

Also, I just tried a little test, and I'm getting some XSS errors from Chrome.

and some other stuff:

Uncaught TypeError: Cannot call method 'getElementsByTagName' of undefined

Unsafe JavaScript attempt to access frame with URL http://brickcomputers.com/ from frame with URL http://fiddle.jshell.net/NeilHanlon/jwLpV/1/show/
. Domains, protocols and ports must match.

Refused to display document because display forbidden by X-Frame-Options.

[Lemon]

NeilHanlon, on 11 April 2012 - 07:32 PM, said:

Also, I just tried a little test, and I'm getting some XSS errors from Chrome.

and some other stuff:

Uncaught TypeError: Cannot call method 'getElementsByTagName' of undefined

Unsafe JavaScript attempt to access frame with URL http://brickcomputers.com/ from frame with URL http://fiddle.jshell.net/NeilHanlon/jwLpV/1/show/
. Domains, protocols and ports must match.

Refused to display document because display forbidden by X-Frame-Options.

The origin of the frame has to be identical to the origin of the parent page or else all access attempts will be refused unless the frame page specifically consents to access. Otherwise you'd be able to do all sorts of evil things like session stealing.

[arronhunt]

My page and iframe are the same domain so I'm not getting any XSS problems. The script is properly injecting the CSS, but it is only doing it to the last node in the array. I'm guessing it's a problem with how I'm looping. I'll try a while loop instead