--- id: "ff2505b5-d4a0-45c2-99d8-66bf3c173261" name: "iframe.contentDocument via js() for SIMnet" micro_summary: "A SIMnet probe found same-origin policy blocks parent-page JS access to the cross-origin iframe's contentDocument." status: "discarded" see_also: [] scope: "Attempted to access iframe content via js(\"document.querySelector('iframe').contentDocument.body.innerHTML\"). Chrome same-origin policy blocks cross-origin iframe access — Canvas → SIMnet iframes are cross-origin." discard_reason: "chrome same-origin policy blocks cross-origin iframe access — contentWindow.document is null for Canvas→SIMnet iframes" ---