While working on a project, I realised there is a function in HTML5 js call postMessage which allow cross domain messages. With this function the height of the iframe page can be transfer to the parent page, so the height of the iframe can be auto adjusted. Some other usage could be simple authentication without leave the parent page.