Comments on: Using iframes for cross-site scripting

By: ??????? » [Web] ????

??????? » [Web] ???? — Fri, 24 Apr 2009 02:36:09 +0000

[...] Using iframes for cross-site scripting [...]

By: Manuel

Manuel — Wed, 22 Apr 2009 13:03:20 +0000

Another tecnique, useful for bookmarklet for example, is to inject in the host page a form with target attribute pointing to the iframe’s id. Than you can post data to the iframe that can be in another domain. Unfortunately you can do this only in one direction.

By: torvego

torvego — Wed, 22 Apr 2009 11:42:43 +0000

You can’t obtain data from different domain that JS comes from, right? So why not putting script on yourdomain.com and ask for resource directly? Have you tried?

By: Information About Movies

Information About Movies — Tue, 21 Apr 2009 13:14:36 +0000

[...] Using iframes for cross-site scripting | A blend of programming … [...]