I'm guessing you can get away with just the SCRIPT element:
```
<script>parent.CKEDITOR.tools.callFunction("$callback", $url, $msg);</script>
```
BTW, why not json_encode the callback, too? This is probably some auto-generated name like with JSONP, right?