There is just one exception - although a window cannot READ window.location of another window in a different domain, it can SET it.
This isn't very helpful because setting location causes the browser to load that URL.