[thelist] Cross-site scripting
Peter-Paul Koch
gassinaumasis at hotmail.com
Thu Sep 20 11:35:41 CDT 2001
>How can I cross-site/domain script? Is there away to tell the browser that
>one
>pages 'trusts' another and will allow DOM access to it? For those
>interested,
>I'm having the following issues:
You can't, except for the following situation:
If both domains are sub-domains of the same domain (for instance,
server1.mybusiness.com and server2.mybusiness.com) you can add
document.domain = 'mybusiness.com';
to all pages, after which cross-domain scripting is allowed on these pages.
If the domains do not share a common higher level domain, it's impossible.
ppk
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
More information about the thelist
mailing list