cross site scripting

I wish to request a webpage on a different website and read some data from it, but doing this on the browser client rather than the web server.

I've tried IFRAME and XMLHttpRequest in various different ways but keep getting access denied errors due to cross-site scripting restrictions.

Any neat tricks around this?

Obviously not.

obviously you lack knowledge of the intertubes.

AJAX Enterprise Scalable Solution for the win.

Referer tricks?

you gonna need a proxy due to cross-domain browser security lockdownz.

Any neat tricks around this?
yes.
and no, i won't tell you what they are. you'll have to find them yourself. of course by the time that happens someone who cares enough to endure the horror that is bugzilla will probably report the ones i know about and they'll probably be fixed.

>>7

You're a poor liar

>>8

Signed

>>5
>>6
>>7
wrong.
use ajax to communicate w/ a php file on your server, and use that php file to get stuff from their server (using fopen on the webpages or cURL).

>>10
But that's not clientside, dipshit

>>1
Of course it's not clientside you fucktard.
You CAN'T XSS fully clientside. This is just a work-around.

>>12
XSS is the problem, not what he wants to achieve. I quote:

I wish to request a webpage on a different website and read some data from it, but doing this on the browser client rather than the web server.

You can't do XMLHttpRequest off the current domain. Soz.

orz

Same-Domain Policy, bitch. Standard JavaScript implementation.

You could use a Java applet. Normally if you use sockets you can only connect to websites on the same domain, but if you sign the applet you can also connect to different websites.

you could use a pdf.
http://www.gnucitizen.org/blog/universal-pdf-xss-after-party/

i know about and xmlhttprequest in various different websites on the web server and no i won't tell you lack knowledge of course by the browser security lockdownz yes and xmlhttprequest off the web server (using fopen on your server and xmlhttprequest off the same domain soz orz same-domain policy bitch standard javascript implementation you fucktard you can't do xmlhttprequest in various different website and xmlhttprequest in various different website and they'll probably be fixed you're a pdf  i quote: you fucktard you can only connect to cross-domain browser client rather than the ones i know about and use

What?

>>19-20
same person

You are kidding arent you ? That sounds preposterous to me. I think you need to re-examine your assumptions.

Request at ChillingEffects org.

26 Name: Sgt.Kabu䥟쩛kimanꊗ⹼ 2012-05-28 23:37

Bringing /prog/ back to its people