[thelist] Cross-site scripting

Peter-Paul Koch gassinaumasis at hotmail.com
Thu Sep 20 11:35:41 CDT 2001

>How can I cross-site/domain script?  Is there away to tell the browser that 
>pages 'trusts' another and will allow DOM access to it?  For those 
>I'm having the following issues:

You can't, except for the following situation:

If both domains are sub-domains of the same domain (for instance, 
server1.mybusiness.com and server2.mybusiness.com) you can add

document.domain = 'mybusiness.com';

to all pages, after which cross-domain scripting is allowed on these pages. 
If the domains do not share a common higher level domain, it's impossible.


Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

More information about the thelist mailing list