Secure Cross Domain Communication for Web Mashups now that everyone is figuring out the same tricks, surely there must be a better way via WHATWG?