The window.name transport is a new technique for secure cross-domain browser
based data transfer, and can be utilized for creating secure mashups with
untrusted sources. window.name is implemented in Dojo in the new dojox.io.windowName
module, and it is very easy to make web services available through the
window.name protocol. window.name works by loading a cross-domain HTML file in
an iframe. The HTML file then sets its window.name to the string content that
should be delivered to the requester. The requester can then retrieve the
window.name value as the response. The requested resource never has access to
the requester’s environment (JavaScript variables, cookies, and DOM).