RE: [PHP] NOT a PHP question..(JavaScript)
| From: | Mark | Date: | Tue, 06 Nov 2001 01:06:44 +0000 |
| Subject: | RE: [PHP] NOT a PHP question..(JavaScript) | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-73529@lists.php.net to get a copy of this message | ||
On Tue, 6 Nov 2001 09:27:05 +1100, Martin Towell wrote:
>Doesn't look like anyone's answered this so....
>
>As I understand it, if you're trying to access a "tainted" method or
>attribute, then you'll need to get your script signed, then it
>should all
>work...
this answer is a little misleading because there's 2 different ideas
here:
1) data tainting was only around until nn3 or so
2) signing scripts is for nn4+
so signing scripts is the way to go for netscape, but it's probably
more of a hassle than anyone would ever be willing to go through. If
the question is how do you set the location of a page in another
frame if a page is already loaded from a different domain, then there
might be a way to do it with a link and target, but if you're trying
to do it on an event firing (form submit, etc...) then you might want
to give up.
also, even if you have a signed script, the browser still has to ask
permission to access that property so you still get a scary security
pop-up
>-----Original Message-----
>From: Jean-Arthur Silve [mailto:jeanarthur@eurovox.fr]
>Sent: Tuesday, November 06, 2001 2:04 AM
>To: php-general@lists.php.net
>Subject: [PHP] NOT a PHP question..(JavaScript)
>
>
>Hi !
>
>Sorry, I know that is a PHP mailing list (and I use and Love PHP !)
>but I
>have a little problem in Javascript (I definitively don't like js !)
>and
>after hour of search I keep searching an answer :
>
>I have 2 frames (A and B)
>
>The URL of the content of the A frame is http://www.domain-
>A.com/page.html
>The URL of the content of the B frame is http://www.domain-
>B.com/page.html
>
>I want a JS script in the B frame can access to the property
>document.URL
>(or location) of the A frame...
>
>Problem is that if you try to access from the B frame to
>parent.frameA.document.location you have a Security Error : JS
>doesn't
>allow a script from a domain to access to this property of another
>script
>if it is not on the same domain...
>
>Is there a way for the script in the A frame to allow access to its
>document.location property to another script on another domain ??
>
>Sorry for my english, not very clear !
>
>Thank you !
>
>
>----------------------------------------------------------------
>EuroVox
>4, place Félix Eboue
>75583 Paris Cedex 12
>Tel : 01 44 67 05 05
>Fax : 01 44 67 05 19
>Web : http://www.eurovox.fr
>----------------------------------------------------------------
>
>
--
Mark, maggelet@mminternet.com on 11/05/2001