javascript IFrame permissions
<p>I know that for protection of the client you can do very little on the contentWindow and contentWindow.document property of the iframe, but what exactly <em>is</em> possible?</p>

<p>Edit: I should have clarified that it's cross-domain.</p>
