cross-domain

How can you remove cookies from a specific domain, NOT your own

Hello, we have a unique issue.. it seems one of our payment processors offers additional options to users the first time they visit our payment page with the processor - being sent to it from our website. However, the subsequent times our users go to that payment page, those additional options are gone... we believe it has to do with coo...

handling a redirect from a cross-origin post in AJAX

We are trying to create a RESTful API that will be hosted on server x.foo.com. Client html applications (built in jquery) will be hosted on y.foo.com. I am dealing with cross-domain issues by setting the Access-Control-Allow-Origin header as described here http://www.w3.org/TR/cors/. So far so good, and I can now successfully make AJAX...

JavaScript/jQuery: How to make sure cross-domain click tracking event succeeds before the user leaves the page?

I'm implementing click tracking from various pages in our corporate intranet in order to add some sorely needed crowd-sourced popular link features ("most popular links in your department in the last 24 hours", etc.) I'm using jQuery's .live() to bind to the mousedown event for all link elements on the page, filter the event, and then f...

javascript How to trigger native click action (replay event) later?

I'm using jQuery to bind to all links on the page (I'm using the 'click' event, but have tried various combinations of 'mousedown' and 'mouseup',together with bind() and live() to no avail). I can intercept the click no problem (with all the above methods). What I am trying to do is send some data via a GET request, and when it complete...

Facebook Connect & HTTP Cookies - How Can I Overcome this "Race Condition"

If you're wondering what the "Race Condition" is, its a flaw in a system whereas it's highly dependent on timing. See the wiki here for more info. So, the condition i have is relating to Facebook Connect and implementing a Single-Sign-On service with an ASP.NET 4.0 Web Application (Forms Based Authentication - IIS7). The process itself...

Is there anyway to use the Imageshack API without PHP?

If I use the ImageShack API just in a form like this: <form method="post" enctype="multipart/form-data" action="http://www.imageshack.us/upload_api.php"&gt; <p><input type="file" name="fileupload"></p> <p><input type="text" name="key" value="Your_Developer_Key"></p> <p><input type="submit" value="Go"></p> </form> the browser gets take...

ASP.NET Cross-Domain Cookies & Facebook Connect

Hi All, I have a website which i integrate with Facebook (via FBML - JavaScript API). I have setup the application on Facebook as per normal, specifying the "Connect URL" to be the domain of my website. However, my application has multiple bindings in IIS for the same website. Such as: www.bar.com.au foo.com.au The domain...

Cross-domain calls from a webbrowser

I would like to execute a cross domain http request from a website. What are my options? Javascript is out, because most browser don't allow cross domain calls. Generally the solution is to use a proxy, but that isn't an option for this project. The other things I was thinking about would be to use Flash or maybe Java. Are there any...

ScriptTagProxy in ExtJS doing an OPTIONS instead of GET?

That's about it. I'm trying to get some delicious cross-domain JSON and for some reason the method that's going through is OPTIONS, even though I've explicitly specified method:'GET' in the config for the ScriptTagProxy. Ideas? ...

Cross Domain JavaScript with DHTML HTC's

I have a typical setup for cross domain. site1.company.com site2.company.com Main application is running off of site1.company.com. Trying to get communication working between the a parent frame from site1 and child frame from site2 Both site 1 and site 2 are setting document.domain='company.com'; The communication works fine both ...

How to cross-domain identify a user with third-party cookies ?

Hello, I am doing an internship in an ad-targeting startup. We have publishers in our network that can display ads we send them. Currently our system is able to analyze the behaviour of a user whenever he visits one of our publishers. On the publisher's site, some javascript code creates a user ID. This javascript code stores the user...

Connectivity and signed-applications in Adobe AIR

I need a little insight into some authentication issues in adobe AIR. Three related facts that fit into my question: Whenever accessing my https:// site from my AIR application, I get the untrusted site warning When I build an AIR app, I don't have a paid-for certificate, so I sign it myself for now My site (that gives the untrusted wa...

How can I do cross-domain postMessage?

The documentation for postMessage implies that cross-domain messaging is possible. However: // When the popup has fully loaded, if not blocked by a popup blocker That isn't a very clear note of how to actually do it. In the meantime, I have created two websites: Parent hosted on qc-a.nfshost.com Child hosted on qc-b.quadhome.com ...

Does Silverlight 4's WriteableBitmap *really* cripple legit cross-domain access in the name of DRM?

In this thread from a year ago it's explained that WriteableBitmap will block read access when any part of it comes from an outside domain - say a free image server. It's further elaborated upon that this is for "DRM". I guess there's some big threat of someone writing a movie-ripper in Silverlight that includes a movie from another do...

How to call a function in the sidebar when main window document loads?

HI, I am having a Firefox plug-in with sidebar. I am having a function in the sidebar. I want to check for the readiness of the document in the main window. If the main window document is ready, the function inside the sidebar should be called. The coding should be inside the sidebar JavaScript as the main window content will be from d...

Jquery $.ajax fails in IE on cross domain calls

I am doing a cross domain request using $.ajax , it works on firefox and chrome but does not issue a call on IE 7,8. can anyone tell me whats wrong with the following?? I have used JSON, JSONP, left that method due to some custom restrictions Usin Allow-access-control-origin headers already on my site(without that chrome and firefox w...

JavaScript and third party cookies

Say there is a site foo.com which loads JavaScript from site bar.com. Now, say the JavaScript from site bar.com tries to read cookies using document.cookies. I was under the impression that using JavaScript, you can read all the cookies set in the browser irrespective of their source. But it turns out that the JavaScript from the site ba...

detecting where my site is iframed

I know that iframed pages can tell that they are, but is it possible to tell where? parent.location runs into security issues when parent is a different domain, as far as I can tell. Any work arounds? ...

cross domain relation

hello, suppose I have www.usa.com as main site. I will create www.utah.com..www.indiana.com...etc on same dedicated server with same hosting. After creating those usa-state sites I will register users from www.usa.com and place them under different states and will give them their own site like www.utah.com/andy . Here user Andy was regi...

Is it possible to make a cross-domain AJAX call on Mobile Browsers?

I have a site which makes SOAP requests to a separate domain using YUI's cross-domain AJAX transport. This is working wonderfully on my site, but unfortunately since mobile browsers don't support flash, I can't get it to work. Does anyone know of a way to make cross-domain AJAX posts on mobile browsers? Thanks! ...