cross-domain

Is it possible to use javascript to download JSON object from another domain/server?

What would that code look like? ...

Close iframe cross domain

I am trying to do something similar to the Clipper application here http://www.polyvore.com/cgi/clipper I can make the iframe appear in another website (cross domain). But I cannot make the "close" button to work. This is what I used but it doesn't work for cross domain (basically remove the iframe element) window.parent.document.getE...

Sending Text Cross Domain By Bookmarklet

I need a user to navigate to a certain page that has a certain div full of useful text. Then click my bookmarklet and send the text in that div back to my server, which is different from the current domain. I have successfully inserted jQuery on the bookmarklet click and selected the text. Now I need to figure out a way to send that t...

Is it possible to append a script to an iframe ?

Hi, i was wondering if i can add/append a javascript to an iframe which is loaded with an external web page that is not in my website. is it possible using jQuery or even simple javascript ? <script> // i need some code here </script> <iframe src="http://www.xxx.xxx/" id="myiframe" /> Note: i don't want to replace the content ...

Wymeditor across subdomains. (Cross site permission issue.)

I have wymeditor on sub1.domain.com, which is accesssed by a page on sub2.domains.com. This live gives an error var styles = this._doc.styleSheets[0]; Permission denied for <http://removed.example.com&gt; to get property HTMLDocument.styleSheets from <http://removed2.example.com&gt;. I am assumoing this is a cross site scripting r...

Issues with cross-domain uploading

I'm using a django plugin called django-filebrowser which utilizes uploadify. The issue I'm having is that I'm hosting uploadify.swf on a remote static media server, whereas my admin area is on my django server. At first, the browse button wouldn't invoke my browser's upload. I fixed this by modifying the sameScriptAccess to always inst...

ajax problem - 200 OK in firebug but red message with no response body

Hi guys, I have small ajax problem related to cross domain as i see it. On localmachine i created html example with some ajax: in registration text field user types 'username', on every keystroke ajax sends it to local Tomcat, where servlet checks if that username is already used and sends 'taken' reponse back. No problem on localho...

Cross-domain iframe communication in Opera

Hi, I have need to communicate between two iframes of the same domain, which live inside a parent page on a different domain that I have no control over. This is a Facebook app and the basic layout is this apps.facebook.com/myapp L iframe1 (src='mysite.com/foo') L iframe2 (src='mysite.com/bar') I need frame1 to talk t...

Rss and external feed

I want to build a similar app like this:http://community.livejournal.com/ohnotheydidnt/32551171.html using a livejournal rss feed. Any way of retrieving an external feed ( meaning getting a feed from a different domain that the one your web application-Same origin policy)? I've built a parser, but I would like to use dashcode for simple ...

Display a podcast from a sub-domain

Hi all, first time poster here so I hope I am doing this correctly. I have been contracted by my church to redesign their website. (They've been dealing with a table layout for years.) I am looking to display an RSS feed (with an audio file) on my website. I am unable to use PHP or any other server-side language, it has to be done in ...

WCF SSPI Failure with External Trust - Selective versus Domain wide

I'm having a problem at work in that our app which uses WCF for SSO is failing when using selective authentication for a domain trust when communicating with the other domain. This is on Server 2k8R2 machines, at a full 2k8R2 functional level for both of their domains (this is a test system, because we have a customer that wants to depl...

How to find the source of IE8 Internet explorer has modified this page to help prevent cross-site scripting

One of my customers gets "Internet explorer has modified this page to help prevent cross-site scripting" error on her website on IE8. The page has several ajax calls to the same domain + calls to standard js files outside the domain such as google analytics. How can I detect which call from the browser is actually causing it? ...

Cross domain cookie reading/setting cross browsers

I know there are already a few threads available here on this subject but I want others' opinion on this. There are two ways to set/read the cross domain cookies: Creating IFrame on A.com pointing to a page on B.com which creates the cookie and pass that information by creating another IFrame on B.com side pointing to A.com, either us...

Timeout on xmlsocket (AS2 / Java)

I'm attempting to connect an xmlsocket to a java server using actionscript 2. I can get it to work fine in "Test Movie", but in a browser I'm having problems with the cross domain policy file. The server app receives the request for the policy file and responds to it with the XML content of the file, but when debugging it claims the req...

Security error on attempted access to twisted rpc server from javascript in the same domain but served from different port

Hi, I have a django server that serves the basic site with user, auth etc and a twisted web server that 'should' deliver live content as json streams. Django server is running on 127.0.0.1:8080 Twisted 127.0.0.1:9897 The problem is that when ever I try to make an http request to twisted server from a page in the django site, I get a ...

retrieving Twitter user info doesn't work in flash

Hi I'm building a Twitter search application in Flash and have encountered a security error when retrieving a user's information using the following... http://api.twitter.com/1/users/show.xml?screen_name= I noticed a crossdomain.xml file returned with the above. This works http://search.twitter.com/search.atom? Can anyone suggest a ...

Detect when iframe is cross-domain, then bust out of it

I have a page with a large iframe that contains a majority of the content. The user interacts with the website by clicking around within the iframe. The functionality I'm trying to build is: When a user navigates away from my site, I do them a favor and bust out of the iframe. The iframe has an onload event which is fired every time a n...

How can I beef up this security with cross domain user sessions?

I have a Mothership domain, and if you log into it, a token is created in the database for your login with user Id, created datetime, expiry datetime and user agent. The expiry is set to an hour after the token was made (created when the user logins). To be able to login from Mothership to Scoutship, I append a query string like so <a ...

Silverlight Cross-Domain w/o Cross-Site Policy File

Is it possible somehow to ask the user to allow cross-domain access instead of a policy file on the target server? Usage scenario: Silverlight app will communicate with devices and which are on the client's local network, and these devices won't know in advance that a silverlight app needs to talk to them. ...

Why does canvas.toDataURL() throw a security exception?

did i not get enough sleep or what?? This throws Error: SECURITY_ERR: DOM Exception 18 and here's my js code... There's no way this shouldn't work!!! var frame=document.getElementById("viewer"); frame.width=100; frame.height=100; var ctx=frame.getContext("2d"); var img=new Image(); img.src="http://www.ansearch.com/images/interface/item/...