All the Perl that's Practical to Extract and Report
use Perl Log In
malte (1708)
malte
(email not shown publicly)
http://www.yur.tv/
Perl hacker for this [schaffhausen.de] company. My Dad's Practice [praxisamhogenkamp.de]
(email not shown publicly)
http://www.yur.tv/
Perl hacker for this [schaffhausen.de] company. My Dad's Practice [praxisamhogenkamp.de]
Saturday February 23, 2008
02:59 PM
Cross domain javascript callbacks
I created a javascript library that enables sending javascript messages between browser pages that reside on different domains.
The listener can register a number of callbacks and allow specific domains to call these callbacks.
This is done via evil cookie magic, but it seems to work. I'd be very interested in feedback. Do you have security concerns? is this a novel idea?
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
--Larry Wall on the creation of Perl
Stories, comments, journals, and other submissions on use Perl; are Copyright 1998-2006, their respective owners.
Do you read Ajaxian ? (Score:1)
Also, your demo page shows different subdomains of the same domain; IIRC, some browser(s) only restrict access to the first level above the TLD ? Have you verified between, say, yahoo.com and google.com ?
Re: (Score:2)
Do you mean the postMessage() [ajaxian.com] article? That's similar, but it is only implemented in opera as far as I know.
xssinterface works across different top-level and second level-domains because it asks a url from the destination domain to set the cookie.