title: Running a Meteor app in an iframe from a different domain
body: <p>After weeks of work I was now finally ready to deploy my app just to find out that meteor doesn't seem to run in an iframe. It works fine when the top level window and the iframe run on the same domain, but not when the domains differ. The error I'm getting on Chrome is:</p>
  
  <pre><code>Uncaught SecurityError: Access to 'sessionStorage' is denied for this document. 
  </code></pre>
  
  <p>After that error, the initialization of Meteor seems to stop and not even <code>Meteor</code> itself will be defined.</p>
  
  <p>After some digging, I found this reference and explanation: <a href="http://www.w3.org/TR/webstorage/#user-tracking">http://www.w3.org/TR/webstorage/#user-tracking</a>
  : "<strong>Blocking third-party storage</strong>
  User agents may restrict access to the localStorage objects to scripts originating at the domain of the top-level document of the browsing context, for instance denying access to the API for pages from other domains running in iframes."</p>
  
  <p>The problem is not specific to my app. You can take any of the demo apps in the meteor gallery and try to embed them in another page with an iframe and you'll see what I mean.</p>
  
  <p>Is there any way around this?</p>
  
  <p><em>Edit 2014-01-07:</em>
  I have tried wrapping some of the places where exceptions are thrown in try-catch blocks, but got the impression that that was crippling meteor too much, such that it wouldn't properly initialize for a different reason.</p>