I think a solution like @timās could work as iframe()
still has the allow-same-origin
flag. Iād consist in spawning a server in a different thread which would be exposed locally only. Iāll try to investigate that this week-end, but I canāt guarantee anything for now.
Unfortunately with this method, thereās no way to auto-update the height.