Cross Domain IFrame Access Denied

My question is what constitutes cross domain in IE7 and what can trigger it?  I'm trying to use ASP.NET Ajax preferably without having to edit the .js files myself.  We are using IFrames... the main site is:

Main Site:  portal.mydomain.com
IFramedPage:  mywebsite.mydomain.com:8002

I thought these would be in the same domain but I'm still getting IE7 'Access Denied' errors (mywebsite.mydomain.com works fine when it's not in an IFrame).  I have a blog entry to fix the issue but I need to know the following two questions

Questions:

1.)  Are those not in the same domain?
2.)  What the definition of the same domain in IE7 because I apparantly don't know it.
LVL 3
IUFITSAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

epochassetCommented:
Hi Iufits,

To my knowledge it would be the same host that the domain resolves to (and same port).

Think of this model.

mywebsite.mydomain.com  (.com is the first level of the domain, mydomain is the second level, and mywebsite is the third).

These are technically two different third level domains (while their the same second and first, etc).

This error may not clearly indicate its presense though.

Check into the following two links and see if anything there may help.  Good luck.

http://weblogs.asp.net/bleroy/archive/2007/01/31/how-to-work-around-the-quot-access-denied-quot-cross-domain-frame-issue-in-asp-net-ajax-1-0.aspx

http://blogs.msdn.com/delay/archive/2007/02/05/safely-avoiding-the-access-denied-dialog-how-to-work-around-the-access-denied-cross-domain-iframe-issue-in-the-ajax-control-toolkit.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
alfredwhangCommented:
this is more commonly known as cross site scripting or XSS.  go wiki on it.  doesn't matter how you do it so long as your page refers to two or more different sources then you will have trouble with any secured browser.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Browsers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.