moubik Posted April 9, 2008 Report Posted April 9, 2008 deci tipul asta spune ca a implementat cross domain scripting in firefox 3http://ejohn.org/blog/cross-site-xmlhttprequest/initial se puteau face cross domain requests dar s-a scos pentru ca este un mare security issueun retard se intreaba de ce a fost scos acest feature de la inceputhttp://ajaxian.com/archives/cross-site-xmlhttprequest-in-firefox-3What exactly is the reason we need this? Has anybody here really understood why XMLHttp is currently limited to one host and cannot communicate cross-domain? I really do not understand that. If XMLHttp cannot do this by default, why it is still possible to load scripts and images from other servers? Why can I do exactly the same type of cross-domain communication using Flash, maybe using Silverlight in the future? What is the original reason for this limitation? Is this documented anywhere?daca cineva nu ii opreste pe astia cu un singur xss in orice site (nu neaparat in yahoo sau google) poti sa citesti mailurile oamenilor de oriunde (yahoo, google).sa modifici informatii personale, sa faci csrf bypass...e o gluma, nu ? Quote
