I have a VisualForce page inside a standard SFDC Page Layout. For UX reasons, we want to be able to refresh the outer (parent) page when something is clicked on the VF page. When we try and do this using parent.location.reload(), we get the CORS JS error:
Uncaught SecurityError: Blocked a frame with origin "https://my_domain.c.cs20.visual.force.com" from accessing a frame with origin "https://my_domain.cs20.my.salesforce.com". Protocols, domains, and ports must match.
So we went to CORS whitelist, and added https://*.visual.force.com as an entry. But this still did not fix the issue. Anyone else come across this?