window.postMessage

Используется для передачи сообщений между фреймами или открытыми всплывающими окнами.
Позволяет обходить same origin policy.
Также позволяет сделать костыль для того, чтобы не ждать минимальной задержки при setTimeout (сейчас по стандарту — 4мс) — https://developer.mozilla.org/ru/docs/DOM/window.setTimeout#Minimum_delay_and_timeout_nesting.
Подробнее — https://developer.mozilla.org/en-US/docs/DOM/window.postMessage.

Пример:

/*
 * In window A's scripts, with A being on <http://example.com:8080>:
 */
 
var popup = window.open(...popup details...);
 
// When the popup has fully loaded, if not blocked by a popup blocker:
 
// This does nothing, assuming the window hasn't changed its location.
popup.postMessage("The user is 'bob' and the password is 'secret'",
                  "https://secure.example.net");
 
// This will successfully queue a message to be sent to the popup, assuming
// the window hasn't changed its location.
popup.postMessage("hello there!", "http://example.org");
 
function receiveMessage(event)
{
  // Do we trust the sender of this message?  (might be
  // different from what we originally opened, for example).
  if (event.origin !== "http://example.org")
    return;
 
  // event.source is popup
  // event.data is "hi there yourself!  the secret response is: rheeeeet!"
}
window.addEventListener("message", receiveMessage, false);

/*
 * In the popup's scripts, running on <http://example.org>:
 */
 
// Called sometime after postMessage is called
function receiveMessage(event)
{
  // Do we trust the sender of this message?
  if (event.origin !== "http://example.com:8080")
    return;
 
  // event.source is window.opener
  // event.data is "hello there!"
 
  // Assuming you've verified the origin of the received message (which
  // you must do in any case), a convenient idiom for replying to a
  // message is to call postMessage on event.source and provide
  // event.origin as the targetOrigin.
  event.source.postMessage("hi there yourself!  the secret response " +
                           "is: rheeeeet!",
                           event.origin);
}
 
window.addEventListener("message", receiveMessage, false);

* In window A's scripts, with A being on <http://example.com:8080>:

var popup = window.open(...popup details...);

// When the popup has fully loaded, if not blocked by a popup blocker:

// This does nothing, assuming the window hasn't changed its location.

popup.postMessage("The user is 'bob' and the password is 'secret'",

"https://secure.example.net");

// This will successfully queue a message to be sent to the popup, assuming

// the window hasn't changed its location.

popup.postMessage("hello there!", "http://example.org");

function receiveMessage(event)

{

// Do we trust the sender of this message? (might be

// different from what we originally opened, for example).

if (event.origin !== "http://example.org")

return;

// event.source is popup

// event.data is "hi there yourself! the secret response is: rheeeeet!"

}

window.addEventListener("message", receiveMessage, false);

* In the popup's scripts, running on <http://example.org>:

// Called sometime after postMessage is called

function receiveMessage(event)

{

// Do we trust the sender of this message?

if (event.origin !== "http://example.com:8080")

return;

// event.source is window.opener

// event.data is "hello there!"

// Assuming you've verified the origin of the received message (which

// you must do in any case), a convenient idiom for replying to a

// message is to call postMessage on event.source and provide

// event.origin as the targetOrigin.

event.source.postMessage("hi there yourself! the secret response " +

"is: rheeeeet!",

event.origin);

}

window.addEventListener("message", receiveMessage, false);

window.postMessage

Similar Posts

LEAVE A COMMENT Отменить ответ