Can I turn ON XSS in my browser locally?

Question

I am developing a widget (HTML, JavaScript) for a platform which allows the (trusted) widget to make XSS calls.

I can test the code by packaging the widget, and using the emulator, but that takes 2 or 3 minutes to reboot every time I make a simple JavaScript code-change.

Is there a way to turn ON XSS support in Firefox, or any other browser that will run in Linux? I only want it locally for me personally of course, so settings, plugins, hacks, or anything else is acceptable.

Answer 1

You can make cross-site calls using an extension on Google Chrome. See here for more details. Of course this means having a special "debug path" in your application which might not be acceptable... can always yank it out afterwards ;-)

Answer 2

For XMLHttpRequest, insert this before calling open:

netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead');

See http://www.zachleat.com/web/2007/08/30/cross-domain-xhr-with-firefox/ for detail. (Might not apply to Fx 3)