出典:Wikipedia
出典:『Wikipedia』 (2011/05/04 20:53 UTC 版)
Cross-document messaging, or web messaging, is an API introduced in the WHATWG HTML5 draft specification, allowing documents to communicate with one another across different origins, or source domains. Prior to HTML5, web browsers disallowed cross-site scripting, to protect against security attacks. This practice barred communication between non-hostile pages as well, making document interaction of any kind difficult. Cross-Document messaging allows scripts to interact across these boundaries, while providing a rudimentary level of security.