[thelist] Cross-site scripting

[Peter-Paul Koch]

>How can I cross-site/domain script?  Is there away to tell the browser that 
>one
>pages 'trusts' another and will allow DOM access to it?  For those 
>interested,
>I'm having the following issues:

You can't, except for the following situation:

If both domains are sub-domains of the same domain (for instance, 
server1.mybusiness.com and server2.mybusiness.com) you can add

document.domain = 'mybusiness.com';

to all pages, after which cross-domain scripting is allowed on these pages. 
If the domains do not share a common higher level domain, it's impossible.

ppk



_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp