I think a solution like @tim’s could work as iframe()
still has the allow-same-origin
flag. I’d consist in spawning a server in a different thread which would be exposed locally only. I’ll try to investigate that this week-end, but I can’t guarantee anything for now.
Unfortunately with this method, there’s no way to auto-update the height.