public marks

PUBLIC MARKS with tags security & ajax

May 2006

April 2006

February 2006

Debunking Strong Misconceptions About Cross-Domain Ajax Security Issues

by jackysee & 1 other (via)
事實上 Cross-domain Ajax 並沒有產生任何新的 security concern,其所要注意的在以前也已經需要注意了

January 2006

November 2005

How to make XmlHttpRequest calls to another server in your domain

by ecmanaut
While this approach does seem to at least partially work in current mozillas (I just tested on Mozilla 1.5, windows), it's far from stable.<br><br>Your bridge solution, on named setup, recursively creates new frames for every new call (which has the poten

August 2005

May 2005

March 2005

Cross-domain XMLHttpRequest via Greasemonkey

by François Hodierne
Jeremy Dunck points out that Aaron Boodman has posted a patch to the Greasemonkey mailing list which allows the XMLHttpRequest object to reach across domains.