I have:

1. A web server (server 1)
2. An application server running some beast of a legacy web app (server 2)
3. An iframe on server 1 pulling in the application from server 2

My problem is:

The legacy app uses JS validation on its forms. When a user attempts to submit an incomplete form, an alert pops up to notify the user that they are a dummy. Of course, this fails when the app is run inside of an iframe because server 1 and server 2 live at different domains.

I tried setting the following proxy directives on server 1:

```
ProxyPass /legacy_app http://server2.url/legacy_app
ProxyPassReverse /legacy_app http://server2.url/legacy_app

```

I'm now able to serve the iframe from <http://server1.url/legacy_app>, but I'm still unable to execute javascript inside that iframe -- I get the same security/access errors as I did when the app was running on a different domain.

Is there something else I can try?