cross-domain

how to exchange variables between extern iframe and site

hey guys, for developement reasons (working with facebook-connect) i put the connect iframe in an iframe. on that way i am able to work on the connect-thing independent of my ip and don't have to develop on the live-server. the iframe holding the connect-button iframe is on my server, accessing the same db-server as the developer versi...

Mystery: How does Google do cross-domain iframe communication?

Hi everyone, When you host Googles web search element on a page, a div is created which incorporates an iframe which points to a Google adsense ads page. However, if there are no ads for the specific query, Google somehow changes the class on YOUR domain to render the div (and iframe) invisible. They are NOT using postMessage, as it al...

Why Response.Write behavior varies in the given scenario?

Hello All, When i POST the page using the following code, the Response.write("Hey") doesn't write the content ("Hey") to the parent page <form method="post" name="upload" enctype="multipart/form-data" action="http://localhost:2518/Web/CrossPage.aspx" > <input type="file" name="filename" /> <input type="submit" value="Upload Data File" ...

Is it possible to change iframe src using javascript exists in page inside that iframe?

I want to change the iframe source when something change in this iframe content, the iframe is in a different domian than the parent page. is this can be done or not? I just need to add a hash to this iframe src, so that i can access this hash value from the parent page and do some stuff based on this value. What i did: In the iframe p...

use jsonp to get xml cross domain

I am trying to read xml into a webpage from another server, and I assume that my problem is Same-Origin Policy, and therefore a cross domain problem. I have a bit of googling and it seems that jsonp is the way forward. Based on some examples I found here on stackoverflow and another sites, this is what I have, and it does not "hit" the ...

Set Headers with jQuery.ajax and JSONP?

I am trying to access google docs with jQuery. Here's what I have so far: var token = "my-auth-token"; $.ajax({ url: "http://docs.google.com/feeds/documents/private/full?max-results=1&amp;alt=json", dataType: 'jsonp', beforeSend: function(xhr) { xhr.setRequestHeader("Authorization", "GoogleLogin auth=" + token); }, succes...

Is it Possible to Make Cross-Domain Requests in Javascript AND Set Custom Headers?

Since you can't apply custom headers on JSONP calls, how do I make cross domain requests AND apply custom headers using jQuery? I'm basically trying to access google docs with jQuery and need to pass an authentication token: var token = "my-auth-token"; $.ajax({ url: "http://docs.google.com/feeds/documents/private/full?max-results=1&...

cross domains - tell parent frame to close an iframe

I have a script that will be loaded on a bunch of sites I don't control. My script needs to open up an iframe. The script and the iframe will be hosted on the same domain (which I control), but the parent pages won't be under my control. When the work in the iframe is done, I need to somehow tell my script in the parent page taht th...

AS3 Loading XML from a different domain

Hi I am trying to load an xml file from wikipedia into my flash movie. loader = new URLLoader(); loader.addEventListener(Event.COMPLETE, tweetLoaded); loader.load(new URLRequest("http://en.wikipedia.org/w/api.php?action=query&amp;rvprop=content&amp;format=xml&amp;pageids="+subNum)); loader.addEventListener(IOErrorEvent.IO_ERROR, onIOEr...

Flash Player 10.1 causing sandbox violation no previous version caused

This is a WTF moment for me. Working with a SWf where it's worked all along, loading data from http://akmi.kaltura.com. But, now, if you switch from Flash Player 10 to Flash Player 10.1, I get the standard security sandbox violation: * Security Sandbox Violation * Connection to http://akmi.kaltura.com//index.php/partnerservices2/...

jQuery cross domain iframe scripting

I am trying to access the DOM of an iframe that loads an external URL. Of course that I get a "Permission denied for" error due to cross domain security. How can I make this work? I saw something done with json (but I can not get a json string from my external source) and something done with HTML5 postmessage. you can see it live at : h...

Any method to bypass Cross Domain issue? (for personal use only)

Hi, there I want to know if there any method to bypass the cross domain issue? It's only for personal use. what I want to do is just extract some data from my page(under control) and fill them into a external site's form (included into my page with iframe) other wise I have to copy & past them manually, that's painful. I tried many me...

Chrome only: AS2 ExternalInterface calls return null / cross-domain iframes

I'm using the cross-domain hack "marathon version" (explained here: http://softwareas.com/cross-domain-communication-with-iframes) to append a swf to a top-level window from within an iframe, as follows: Page on domain A hosts our javascript, on domain B, in an iframe. Our js on domain B creates a proxy iframe pointing to a file on...

can I listen to any cross-domain iframe events?

Are there any events that I can listen to on an iframe on a different domain? For example, have this page on domain1: <html> <body> <iframe src="domain2.com"></iframe> </body> </html> What events can I listen to with regard to the contentWindow of the iframe? Thanks! ...

access the IInternetHostSecurityManager::GetSecurityId Method to work around a cross domain iframe issue

After much research it appears to create and use our own security manager in the web browser control in IE we need to override the GetSecurityId method for both IInternetHostSecurityManager and IInternetSecurityManager as at some point they are compared and if found to return a different result they throw a UnauthorizedAccess exception. ...

using includes cross domain that contain php code - failing

I have a series of web sites all hosted on the same server with different domains. I want to host some common PHP scrips and then be able to call these from the other domains. Im am a bit fresh with my php so pls excuse code attempts - I have tried iterations of the following which may try and help you understand what I am aiming for! ...

Switching to cross domain tracking from previous Google Analytics implementation

We have in place a simple implementation of GA and have had for some time, the only additional methods we use are setVar and setSessionTimeout. Is there a way we can switch to a cross-domain tracking configuration of GA (where certain links are wired via the _link method) without losing existing tracking data on client systems? I've run...

What's the point of the Anti-Cross-Domain policy?

Why did the creators of the HTML DOM and/or Javascript decide to disallow cross-domain requests? I can see some very small security benefits of disallowing it but in the long run it seems to be an attempt at making Javascript injection attacks have less power. That is all moot anyway with JSONP, it just means that the javascript code is...

How can Yelp and Netflix see my Facebook stuff (Cross domain cookie access)?

I thought nothing cross domain can be done. Then how come when I goto Netflix, it tells me which of my friends have liked it. In fact I've gone to some random blog, and it was showcasing some product I had liked, and it told me that I had liked the product. So, basically it was able to read my Facebook cookie or something. What's the d...

Troubles with JSONP Request

Ok, I'm not 100% sure what I'm doing wrong here. Maybe I just need a second pair of eyes to reveal the error of my ways. I'm sending a JSONP request using jQuery from one domain (https://customerhub.net) to a PHP script on my domain (https://dankennedy.com) and getting a response from that script. I know the request is working because...