Yes that would be a cross-origin situation, but what you can do then is handle those events in your iframe, then emit them using postMessage. Then, in your parent window (i.e. your app) you can use
window.addEventListener("message", (event) => {
To handle the message