injecting external js into self created iframe

Question

So i am trying to inject and external css and js into a self created iframe to provide an extra security layer, there therefore is no cross domain issues.

here is the co

Answer 1

I think you have to create the script element from the iframe's document object. It should be available as contents[0], which you can pass to insertScript.

It works if you use appendChild directly on your head node (not the jQuery wrapper):

$('iframe').contents().find('head')[0].appendChild(script);

http://jsbin.com/enidiv/1/edit

Answer 2

As long as the iframe domain, protocol, and port matches you can add scripts. Otherwise, it is treated as an unsafe attempt to access a different url.