Home > Article > Web Front-end > html5 cross-domain communication postMessage
html5 cross-domain communication postMessage
- 黄舟Original
- 2017-02-16 14:30:481843browse
How to use postMessage in html5 cross-domain communication
Documents under different domain names are not allowed to access each other's documents due to security issues, but some Sometimes it is necessary to do this. Therefore, we can generally use window.name, hash, or jsonp to achieve cross-domain access.
But since HTML5 came out, we can have one more way to implement postMessage. The following is the simplest example of message passing. The function we want to implement is to send the content in page1 to different Page2 page under the domain name, and then page2 will display the corresponding message content.
The following are several important event attributes:
source – message source, message sending window/iframe.
origin – URI of the message source (may include protocol, domain name and port), used to verify the data source.
data – Data sent by the sender to the receiver. <br>These three attributes are data that must be used in message transmission.
First we need two pages, and then they must be located under different domain names. Of course, this machine must have a web server. Next, we will modify the host to achieve different domain name access
127.0.0.1 www.postmessage1.com127.0.0.1 www.postmessage2.com
The homepage http://www.php.cn/ has an iframe nested inside it
<!DOCTYPE html><html><head>
<title>Html5 postMessage跨文档通信</title></head><body>
<input type="text" id="text">
<input type="button" id="send" value="发送">
<iframe id="ifr" src="http://www.postmessage2.com/page2.html"></iframe>
<script type="text/javascript">
var text = document.getElementById('text'),
send = document.getElementById('send'),
ifr = window.frames[0]; //ifr = document.getElementById('ifr').contentWindow;
//确保你使用的是iframe的contentWindow属性，而不是节点对象。
send.addEventListener('click',function(){
//主窗口postMessage发送消息给iframe子窗口。
//子窗口通过监听message事件来获得消息
ifr.postMessage(text.value,'http://www.postmessage2.com');
}) </script></body></html>The src address of the iframe is http://www.php.cn/
<!DOCTYPE html><html><head>
<title></title></head>
<script type="text/javascript">
//在iframe窗口中监听messages事件，并接收消息
window.addEventListener('message',function(event){
var p1 = document.getElementById('p1'); if(event.origin === 'http://www.postmessage1.com'){
p1.innerHTML += event.data +"<br>";
}
}) </script><body>
<h1>我是一个iframe</h1>
<p id="p1"></p></body></html> 
Like many other web technologies, if you do not verify the legitimacy of the data source, then using this technology will become very dangerous; the security of your application requires you to It's responsible. window.postMessage is like PHP versus JavaScript technology. window.postMessage is cool, isn't it?
The two-way data transmission is the same:
<!DOCTYPE html><html><head>
<title>Html5 postMessage跨文档通信</title></head><body>
<input type="text" id="text">
<input type="button" id="send" value="发送">
<iframe id="ifr" src="http://www.postmessage2.com/postmessage/iframe01.html"></iframe>
<script type="text/javascript">
var text = document.getElementById('text'),
send = document.getElementById('send'), // ifr = window.frames[0];
ifr = document.getElementById('ifr').contentWindow;
window.addEventListener('message', function(ev){
if(ev.origin === 'http://www.postmessage2.com'){
alert('从'+ ev.origin + '传过来的消息：' + ev.data);
}
});
send.addEventListener('click',function(){
//主窗口postMessage发送消息给iframe子窗口。
//子窗口通过监听message事件来获得消息
ifr.postMessage(text.value,'http://www.postmessage2.com');
}) </script></body></html>The code of the other page is as follows:
<!DOCTYPE html><html><head>
<title></title></head>
<script type="text/javascript">
//在iframe窗口中监听messages事件，并接收消息
window.addEventListener('message',function(event){
var p1 = document.getElementById('p1'); if (event.origin === 'http://www.postmessage1.com') {
p1.innerHTML += "来自窗口" + event.origin + event.data+"<br>"
} //像主页面回送消息
event.source.postMessage("你好，这里是：" + this.location, event.origin);
}); </script><body>
<h1>我是一个iframe</h1>
<p id="p1"></p></body></html>
2. Channel communication
The message channel provides a direct, two-way communication method between browsing contexts. Like cross-document communication, the DOM is not directly exposed. Instead, each end of the pipe is a port, and data is sent from one port and received by the other.
Message channels are useful, especially for communication across multiple origins. Please consider the following situation: <br> Renren.com (http://www.php.cn/) embeds a third-party game page (through iframe, such as "Renren Restaurant"). At the same time, this third-party The game page (http://www.php.cn/) needs to obtain the user's communication information from another address book website (http://www.php.cn/). What to do?
That is to say, the address book site needs to send information to the game site. According to cross-document communication, we let the parent page serve as the proxy (that is, the Renren page here) (similar to the first demo). However, this approach means that address book sites need to have the same level of trust as Renren pages. Renren, a social networking site, needs to trust every request, or filter it for us (should refer to: specify one by one).
However, using channel communication, the address book site (http://www.php.cn/) and the game site (http://www.php.cn/) can directly communicate.
MessageChannel and MessagePort objects
When we create a MessageChannel object, we actually create two interconnected ports. One port remains open for the sending end. The other one is forwarded to other browsing contexts (sent by the parent page to another child page of the iframe element).
var mc = new MessageChannel();
Each port is a MessagePort object, including 3 available methods:
postMessage() Send a message through the channel
start() Start dispatching received messages on the port
close() Close the port
The MessagePort object also has the onmessage event attribute, Can be used to define event handlers instead of event listeners.
Examples <br>I can’t understand the jargon-y stuff above, but it’s easier to explain with examples.
First create three websites, the main website is: http://www.php.cn/, and two other sub-websites http://www.php.cn/ and http://www. php.cn/. Now let’s simulate the communication process between two sub-websites:
Requirements: When sub-website 1 is loaded, send a message to sub-website 2: "(1) I can’t wait, are you okay? ? <br>", when sub-website 2 receives the message, it returns a message to sub-website 1, "(2) Don't worry, it will be there soon!" When sub-webpage 1 receives the message from sub-website 2, it returns the dialogue information to the main page.
Code of sub-page 1
<!DOCTYPE html><html><head>
<title>通道通信子页面iframe01</title></head><body><script type="text/javascript">
window.onload = function(){
var mc, portMessageHandler;
mc = new MessageChannel();
portMessageHandler = function(event){
alert(event.data);
} //向父页面发送消息以及端口port2
window.parent.postMessage('（1）我已经等不及了，你好了吗？<br>', 'http://localhost/test1/main.html', [mc.port2]); //定义本页面接收到消息后，应该做的处理
mc.port1.addEventListener('message', portMessageHandler, false); //打开本页面的端口，开始监听。。。
mc.port1.start();
}</script></body></html>Code of main page:
<!DOCTYPE html><html><head>
<title>messageChannel通信</title></head><body>
<h1>通道通信实例</h1>
<iframe style="display: none;" src="http://localhost/test1/iframe01.html"></iframe>
<iframe style="display: none;" src="http://localhost/test2/iframe02.html"></iframe>
<script type="text/javascript">
window.onload = function(){
var iframes, messageHandle;
iframes = window.frames;
messageHandle = function(event){
if (event.ports.length > 0) { //如果有接收端口，将接收的端口与消息转发给iframe02
iframes[1].postMessage(event.data,'http://localhost/test2/iframe02.html', event.ports);
}
} //监听第一个页面
window.addEventListener('message',messageHandle,false);
} </script></body></html>Code of subpage 2:
<!DOCTYPE html><html><head>
<title>通道通信子页面iframe02</title></head><body><script type="text/javascript">
window.onload = function(){
var messageHandler = function(event){
event.ports[0].postMessage(event.data + "（2）你别急呀，马上就好！");
} //子页面2接收到消息，并将新的消息转发给子页面1
window.addEventListener('message',messageHandler, false);
}</script></body></html>Result image<br>
The above demo uses three pages: the main page and two iframe pages. Let’s talk about what each page does:
The first is the first iframe page: it has three tasks,
一是创建MessageChannel通道对象；
二是告诉主页面，我加载好了，并把端口传过去；
三是显示发送信息。
//1.创建MessageChannel通道对象mc = new MessageChannel();//2.二是告诉主页面，我加载好了，并把端口传过去；window.parent.postMessage('（1）我已经等不及了，你好了吗？<br>', 'http://localhost/test1/main.html', [mc.port2]);//3.显示发送信息mc.port1.addEventListener('message', portMessageHandler, false); mc.port1.start();
主页面其任务很简单就一个：告诉第二个iframe页面，端口已经打开了（第一个iframe就可以确定跟第二个iframe通信的端口了）。
// 将端口告诉其他文档iframes[1].postMessage(event.data,'http://localhost/test2/iframe02.html', event.ports);
最后就是第二个iframe页面。其任务有两个：一是确定接到的消息与端口；二是将post一个新的数据和此端口保持通信了。
// 1. 接到消息与端口window.addEventListener('message',messageHandler, false);// 2. 与端口建立通道，post一个新的数据port.postMessage(message);
html5跨域通信之postMessage的用法
不同域名下的文档因为安全问题，不允许相互之间文档的访问，但是有的时候却不得不需要这样的操作。因此我们一般可以采用 window.name，hash，或者jsonp来实现跨域访问。
不过自从html5出来以后，我们又可以多一种实现方式了postMessage，下面就是一个最简单的消息传递的例子，我们要实现的功能是将page1页面中的内容，发送到不同域名下的page2页面，然后page2将对应消息内容展示出来。
下面是几个比较重要的事件属性：
source – 消息源，消息的发送窗口/iframe。
origin – 消息源的URI(可能包含协议、域名和端口)，用来验证数据源。
data – 发送方发送给接收方的数据。 <br>这三个属性是消息传输中必须用到的数据。
首先我们需要两个页面，然后必须分别位于不同的域名下，当然本机肯定要有一个web服务器，接下来就通过修改host来实现不同域名访问
127.0.0.1 www.postmessage1.com127.0.0.1 www.postmessage2.com
主页http://www.php.cn/ 里面嵌套一个iframe框架
<!DOCTYPE html><html><head>
<title>Html5 postMessage跨文档通信</title></head><body>
<input type="text" id="text">
<input type="button" id="send" value="发送">
<iframe id="ifr" src="http://www.postmessage2.com/page2.html"></iframe>
<script type="text/javascript">
var text = document.getElementById('text'),
send = document.getElementById('send'),
ifr = window.frames[0]; //ifr = document.getElementById('ifr').contentWindow;
//确保你使用的是iframe的contentWindow属性，而不是节点对象。
send.addEventListener('click',function(){
//主窗口postMessage发送消息给iframe子窗口。
//子窗口通过监听message事件来获得消息
ifr.postMessage(text.value,'http://www.postmessage2.com');
}) </script></body></html>iframe框架的src地址为http://www.php.cn/
<!DOCTYPE html><html><head>
<title></title></head>
<script type="text/javascript">
//在iframe窗口中监听messages事件，并接收消息
window.addEventListener('message',function(event){
var p1 = document.getElementById('p1'); if(event.origin === 'http://www.postmessage1.com'){
p1.innerHTML += event.data +"<br>";
}
}) </script><body>
<h1>我是一个iframe</h1>
<p id="p1"></p></body></html>
跟其他很web技术一样，如果你不校验数据源的合法性，那使用这种技术将会变得很危险；你的应用的安全需要你对它负责。window.postMessage就像是PHP相对于JavaScript技术。window.postMessage很酷，不是吗？
双向数据传输也是一样的：
<!DOCTYPE html><html><head>
<title>Html5 postMessage跨文档通信</title></head><body>
<input type="text" id="text">
<input type="button" id="send" value="发送">
<iframe id="ifr" src="http://www.postmessage2.com/postmessage/iframe01.html"></iframe>
<script type="text/javascript">
var text = document.getElementById('text'),
send = document.getElementById('send'), // ifr = window.frames[0];
ifr = document.getElementById('ifr').contentWindow;
window.addEventListener('message', function(ev){
if(ev.origin === 'http://www.postmessage2.com'){
alert('从'+ ev.origin + '传过来的消息：' + ev.data);
}
});
send.addEventListener('click',function(){
//主窗口postMessage发送消息给iframe子窗口。
//子窗口通过监听message事件来获得消息
ifr.postMessage(text.value,'http://www.postmessage2.com');
}) </script></body></html>另一个页面的代码如下：
<!DOCTYPE html><html><head>
<title></title></head>
<script type="text/javascript">
//在iframe窗口中监听messages事件，并接收消息
window.addEventListener('message',function(event){
var p1 = document.getElementById('p1'); if (event.origin === 'http://www.postmessage1.com') {
p1.innerHTML += "来自窗口" + event.origin + event.data+"<br>"
} //像主页面回送消息
event.source.postMessage("你好，这里是：" + this.location, event.origin);
}); </script><body>
<h1>我是一个iframe</h1>
<p id="p1"></p></body></html>
2.通道通信
消息通道提供了一个直接，双向浏览上下文之间的通信手段。跟跨文档通信一样，DOM不直接暴露。取而代之，管道每端为端口，数据从一个端口发送，被另一个端口接收，。
消息通道是有用的，特别是跨多个起源的沟通。请考虑以下情形： <br>人人网上(http://www.php.cn/)嵌入了一个第三方的游戏页面（通过iframe的形式，如“人人餐厅”），同时，这个第三方的游戏页面(http://www.php.cn/)又需要从另外一个通讯录网站(http://www.php.cn/)获取用户的通讯信息。咋办？
也就是说通讯录站点要发送信息给游戏站点，根据跨文档通信，我们让父页面作为代理（也就是这里的人人网页面）（类似第一个demo）。然而，这种做法意味着通讯录站点需要有和人人网页面一样的信任级别。人人网这个社交站点需要信任每一个请求，或者为我们过滤（应该指：一个一个指定）。
但是，使用通道通信，通讯录站点(http://www.php.cn/)和游戏站点(http://www.php.cn/)可以直接沟通。
MessageChannel和MessagePort对象
当我们创建了一个MessageChannel对象，我们实际上创造了两个相互关联的端口。一个端口保持开放，为发送端。另外一个被转发到其他浏览上下文(被父页面发送到另外一个iframe元素的子页面中)。
var mc = new MessageChannel();
每一个端口就是一个MessagePort对象，包含3个可用方法：
postMessage() 通过通道发送消息
start() 开始在端口上分派接受的信息
close() 关闭端口
MessagePort对象还有onmessage事件属性，可被用来定义事件句柄而不是事件监听。
实例 <br>上面过于术语的东西我自己都看不明白，还是实例好说话。
首先建立三个网站，其中主网站为：http://www.php.cn/，另外建立两个子网站http://www.php.cn/和http://www.php.cn/。现在来模拟两个子网站之间的通信过程：
需求：当子网站1被加载完成后，向子网站2发送消息：“（1）我已经等不及了，你好了吗？<br>”，当子网站2接收到消息后，向子网站1返回消息，“（2）你别急呀，马上就好！”。当子网页1接收到子网站2 的消息后，返回给主页面页面对话信息.
子页面1的代码
<!DOCTYPE html><html><head>
<title>通道通信子页面iframe01</title></head><body><script type="text/javascript">
window.onload = function(){
var mc, portMessageHandler;
mc = new MessageChannel();
portMessageHandler = function(event){
alert(event.data);
} //向父页面发送消息以及端口port2
window.parent.postMessage('（1）我已经等不及了，你好了吗？<br>', 'http://localhost/test1/main.html', [mc.port2]); //定义本页面接收到消息后，应该做的处理
mc.port1.addEventListener('message', portMessageHandler, false); //打开本页面的端口，开始监听。。。
mc.port1.start();
}</script></body></html>主页面的代码：
<!DOCTYPE html><html><head>
<title>messageChannel通信</title></head><body>
<h1>通道通信实例</h1>
<iframe style="display: none;" src="http://localhost/test1/iframe01.html"></iframe>
<iframe style="display: none;" src="http://localhost/test2/iframe02.html"></iframe>
<script type="text/javascript">
window.onload = function(){
var iframes, messageHandle;
iframes = window.frames;
messageHandle = function(event){
if (event.ports.length > 0) { //如果有接收端口，将接收的端口与消息转发给iframe02
iframes[1].postMessage(event.data,'http://localhost/test2/iframe02.html', event.ports);
}
} //监听第一个页面
window.addEventListener('message',messageHandle,false);
} </script></body></html>子页面2的代码：
<!DOCTYPE html><html><head>
<title>通道通信子页面iframe02</title></head><body><script type="text/javascript">
window.onload = function(){
var messageHandler = function(event){
event.ports[0].postMessage(event.data + "（2）你别急呀，马上就好！");
} //子页面2接收到消息，并将新的消息转发给子页面1
window.addEventListener('message',messageHandler, false);
}</script></body></html>结果图 <br>
上面的demo动用了三个页面：主页面和两个iframe页面。下面说说每个页面都做了些什么：
首先是第一个iframe页面：其任务有三个，
一是创建MessageChannel通道对象；
二是告诉主页面，我加载好了，并把端口传过去；
三是显示发送信息。
//1.创建MessageChannel通道对象mc = new MessageChannel();//2.二是告诉主页面，我加载好了，并把端口传过去；window.parent.postMessage('（1）我已经等不及了，你好了吗？<br>', 'http://localhost/test1/main.html', [mc.port2]);//3.显示发送信息mc.port1.addEventListener('message', portMessageHandler, false); mc.port1.start();
主页面其任务很简单就一个：告诉第二个iframe页面，端口已经打开了（第一个iframe就可以确定跟第二个iframe通信的端口了）。
// 将端口告诉其他文档iframes[1].postMessage(event.data,'http://localhost/test2/iframe02.html', event.ports);
最后就是第二个iframe页面。其任务有两个：一是确定接到的消息与端口；二是将post一个新的数据和此端口保持通信了。
// 1. 接到消息与端口window.addEventListener('message',messageHandler, false);// 2. 与端口建立通道，post一个新的数据port.postMessage(message);
以上就是html5跨域通信之postMessage的内容，更多相关内容请关注PHP中文网（www.php.cn）！<br>
<br>
Related articles
See more- AlloyTouch full-screen scrolling plug-in creates a smooth H5 page in 30 seconds
- HTML5 actual combat and analysis of touch events (touchstart, touchmove and touchend)
- Detailed explanation of image drawing examples in HTML5 canvas 9
- Regular expressions and new HTML5 elements
- How to combine NodeJS and HTML5 to drag and drop multiple files to upload to the server