javascript - <script> src replacement - sandbox breaker - will it last? -


hey people, working on web do-dad allows has embed code.

in particular embed, iframe added page in place of embed code via javascript. have control of user's page, and, since writing content of iframe javascript well, control of iframed page. doing (as opposed sourcing iframe our server) lets talk iframe cool trick.

the problem: iframed page still needs ajax stuff our server. sandbox issues! solution, seemed me <script> src replacement - replacing our ajax procedure sandbox-breaker version.

i have been told ability of browsers on chopping block. true? terrible! can't find anythign effect in (admittedly brief) research, , though i'd go experts

  • is <script> src replacement viable mechanism pull off sandbox-breaker type effects?
  • is <script> src replacement viable @ all?
  • how adwords work? need call home, right? how that?
  • i understand soon-to-be available cross site xhr stuff pop security dialogs - true?
  • can recommend , other sandbox breaker technique won't pop security dialog?

(yes aware of security concerns - wearing protection , whatnot)

thanks!

is src replacement viable mechanism pull off sandbox-breaker type effects?

yes

is src replacement viable @ all?

yes. original ajax.

how adwords work? need call home, right? how that?

adwords based on screen-scrape of site. context-related. ajax content not scraped unless know how use url hash techniques.

i understand soon-to-be available cross site xhr stuff pop security dialogs - true?

the hosting page need explicitly allow this, yes.

can reccomend , other sandbox breaker technique won't pop security dialog?

use flash.


Comments

Popular posts from this blog

php - What is the difference between $_SERVER['PATH_INFO'] and $_SERVER['ORIG_PATH_INFO']? -

fortran - Function return type mismatch -

queue - mq_receive: message too long -