cross-domain communication using location.hash