cross-domain

Extracting HTML Data with Curl / PHP

I have the following code in PHP $ch = curl_init("http://blog.com"); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $output = curl_exec($ch); curl_close($ch); echo $output; I am trying to i...

sub-domain cookies, sent in a parent domain request?

Are sub-domain cookies sent in a parent domain HTTP request? For instance, say I have the cookies: Name Value Domain (not https) ABC 1 .example.com XYZ 0 foo.example.com DEF 0 bar.example.com Would [email protected] and [email protected] be sent along in the HTTP-header cookies on a ...

xml cross port on same server?

hey all, i have an apache server on port 8080 and apache tomcat on 8181. i want to call a command in apache from tomcat. this command is a php script found on the apache server port 8080. i use jquery inside a javascript function on tomcat server, using $.ajax. sthg like: function fct() { $.ajax({ type: "GET", url: pathof...

Conversion tracking with Google Analytics on 3rd party (off-site) shopping cart

Hello, I have the following scenario: The user has an on-site shopping cart where he adds products. When the user clicks on checkout he is POSTed to a script that computes the buy link to an off-site shopping cart and redirects him with the Location header. The user continues with the payment in the 3rd party website. What I need is...

Securing JSONP?

Hi, I have a script that uses JSONP to make cross domain ajax calls. This works great but my question is, is there a way to prevent other sites from accessing and getting data from these URL's? I basically would like to make a list of sites that are allowed and only return data if they are in the list. I am using PHP and figure I might ...

Change Flash security whilst offline

I've got Flash content that needs to run within a web page off a CD. It works fine if I change the security settings in the Flash Global Security settings screen but that can only be accessed online. So... Can the security violation be overcome with a cross-domain XML on the local drive somehow? Can the Global Security settings screen ...

Invoke javascript function cross domain, don't expect a return value

I want to invoke a javascript function, and I don't need a return value. The function is provided by a flash externalinterface, but I don't have access to allowing my domain access... Can I proxy a javascript invocation? Do I have to send a cloned post, or is it possible to simply call the function? I know YUI has callSWF, can I use th...

Loggin a user across different domains

Hello, two years ago I had to design a system to share authentication data across multiple domains, all of them shared the same server/db. I was able to pull this off with a complex system of cookie sharing which, to date still works. I'm now in the process of redesigning the system and I was wondering if there are better ways to achie...

getting access is denied error on IE8

I have a html form (upload.htm) with a html file upload control inside of it. <form id="frmupload" name="upload" enctype="multipart/form-data" action="uploadhandler.ashx" method="post"> <input id="uploader" name="uploadctrl" type="file"/> </form> There is also one javascript method in the above page which goes like: function perf...

Javascript cross window interaction.

Hi, I hace this very simple javascript to write on a text area when the link is clicked: <head> <script language="javascript" type="text/javascript"> function addtext(text) {document.form.textarea.value = document.form.textarea.value+= text;} </script> </head> <body> <form action="" method="" name="form"> <textarea name="te...

auto-size iframe cross domain

I am making a web widget using iframe and javascript and i would like to make my iframe resizable to it´s content (which is loaded from other domain). I have done some search(inclusive here at StackOverflow) and i find a couple of topics but i couldn´t find any conclusions about this issue. Is this possible or not? Because atm i have ...

Silverlight cross domain confusion

I have a Silverlight application that does two things: 1) connects to a WCF server (hosted inside a WPF app on a different PC) and sends small packets of info (using PollingDuplexHttpBinding if it matters) 2) sends a web request for get an XML file from a different remote server for parsing At dev time, its all running locally, but in...

Preventing javascript running in a HREF

Hi, I have a problem with the following HTML: <a href="javascript:document.formName.submit();" target="iframe"> Where formName is the name of a form inside the iframe. I would like the browser to navigate to the page "javascript:..." in the iframe, so it executes the javascript on the current page in the iframe. My problem is that th...

Getting iframe URL location from parent document

Hello, I have document with iframe. I have no problem setting iframe's location by using this: $('#iframe').attr('src', 'http://www.another-domain-site.com'); When user navigates a few pages in that iframe, then I want to get back URL where he ends up. But when the SRC attribute of the iframe never changes from what I initially have...

How to request different domain with Ajax in jQuery

I need to make a request to a different domain with Ajax in jQuery! Should I use iframe? Edited: On facebook.com working chat, with few different domain name? GET http:// www.facebook.com/ajax/presence/reconnect.php?__a=1&reason=6&iframe_loaded=false&post_form_id=23be2df75b74a0bcb61358814c56ba4f 200 OK GET http://0.50.channel.facebo...

(Mobile) Browser support for Cross-Origin Resource Sharing?

I'm building a site that uses w3c CORS to make oAuth-signed HTTP requests to a remote server. Mozilla has a great document explaining how to make and receive CORS requests, and there's good support in firefox, chrome, and safari. Does anyone maintain a matrix of browser support for CORS features (e.g. preflight OPTIONS requests for cro...

I thought cross-subdomain AJAX requests were allowed, but this Chrome error seems to indicate otherwise

I know that cross-domain requests are disallowed for security reasons, but I was under the impression that only the top-level domain needed to match, that different sub-domains were okay. However, I am getting this error from Chrome 7: "Unsafe JavaScript attempt to access frame with URL http://foo.somedomain.com/dir/page.html from fram...

how to specify all ports in client access policy file - silverlight

How do I specify a wildcard '*' for the ports in a client access policy file? If I want to specify multiple ports in the following file is there anyway to do this using a wildcard instead of explicitly listing each server: <?xml version="1.0" encoding="utf-8"?> <access-policy> <cross-domain-access> <policy> <allow-from http...

Cross domain access permission denied in iframe

Hi, I am trying to embed OWA (microsoft exchange server 2010) in a web page within an iFrame but i get a javascript error on the OWA page saying Access Denied and then none of the controls within the OWA window work. I have to use OWA in web page , i read in the form that cross domain not work properly. Is there any other way by whi...

adding crossdomain.xml to tomcat 6.0.24 to access webservices with Flex

I have to deploy a webapp on Tomcat 6.0.24, serving some webservices that should be accessed with REST-style methods (not fully REST, since the used flex class HTTPService can just send GET and POST). The webservices are deployed at http://localhost:8080/-webappname-/rest/-methodname- The problem is that the policy of flex sandbox (i ...