javascript permission/access denied accessing parent non-ssl attributes from an ssl iframe

I understand that to access the parent properties of an iframe it has to be the same domain/scheme/ports, but being this only an ssl/non-ssl开发者_Go百科 issue, is there any workaround?

No. SSL/non-SSL means a different scheme and a different port.

Worse, if you could do this, then all an attacker has to do is inject some code into the non-SSL page, and that could access the SSL data, rendering it insecure.