title: Puppeteer: another way of getting contents of an iframe besides disable-web-security?
body: <p>When I use Puppeteer to get the HTML of a page with an iframe, I run into</p>
  
  <p><code>DOMException: Blocked a frame with origin [url] from accessing a cross-origin frame</code></p>
  
  <p>I understand to bypass this, I can use:</p>
  
  <pre><code>puppeteer.launch({
      headless: true,
      args: ['--disable-web-security']
  });
  </code></pre>
  
  <p>But is there another way of bypassing the cross domain issue other than using the <code>--disable-web-security</code> flag? I'm seeing people online urging the community to not use the flag because it's dangerous as it exposes your local file system.</p>