javascript - When page is opened with window.open, how can the opened page allow the opener to access its contents? -
is possible page opened window.open allow examined cross-origin opener? (this use in internal applications, security not significant concern.) , if so, how? i've tried replacing of cors , same-origin policies can find , still access denied on properties child window. in particular trying use internet explorer 11 headers these of headers i've tried far access-control-allow-origin: http://web1.corp.local access-control-allow-credentials: true access-control-expose-headers: cache-control,content-language,content-type,expires,last-modified,pragma access-control-expose-methods: get,post,option,put,delete,head x-content-security-policy: default-src *;script-src * content-security-policy: default-src *;script-src * x-xss-protection: 0 x-permitted-cross-domain-policies: what i'm trying do... i want web1.corp.local execute javascript on page on web2.corp.local . control both domains; way web2 tell browser okay web1 read , execute things on web2 . request on ...