NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.
All the Perl that's Practical to Extract and Report
Stories, comments, journals, and other submissions on use Perl; are Copyright 1998-2006, their respective owners.
Do you read Ajaxian ? (Score:1)
Also, your demo page shows different subdomains of the same domain; IIRC, some browser(s) only restrict access to the first level above the TLD ? Have you verified between, say, yahoo.com and google.com ?
Re: (Score:2)
Do you mean the postMessage() [ajaxian.com] article? That's similar, but it is only implemented in opera as far as I know.
xssinterface works across different top-level and second level-domains because it asks a url from the destination domain to set the cookie.