title: Can Cross-Origin Resource Sharing headers authorize X-Domain IFRAME access?
body: <p>Adjusting the height of an IFRAME to match its content page's height <a href="https://stackoverflow.com/questions/153152/resizing-an-iframe-based-on-content">can be a real drag</a> when the containing and content pages are not from the same domain.</p>
  
  <p>Do the Cross-Origin Resource Sharing (CORS) headers make it possible for the content page to authorize cross-domain access to its resources and thus allow its containing page to read its height? (or, alternatively, the containing page authorize the content page to announce its height?)</p>
  
  <p>Or is CORS strictly an AJAX thing?</p>