title: Secure way to pass sensitive information to iframe
body: <p>I have to pass authentication token from my website to my iframe in a secure way. My iframe is located on the same domain as my website. </p>
  
  <p><em>Is it secure to pass auth token as parameter to iframe's <code>src</code> property?</em> I mean:</p>
  
  <pre><code>&lt;iframe src={"/purse/index.html?auth_token=" + token} /&gt;
  </code></pre>
  
  <hr>
  
  <p><strong>UPDATE:</strong> By secure I mean that no-one except current (signed in) user have a chance to access the token. </p>
  
  <p><em>P.S.</em> In your answer pls also describe the way <code>auth_token</code> could be stolen with my approach</p>