Why do browsers prevent cross-site AJAX? -

-

what of examples of attacks made if possible?

i run website gives away best free pornography in town. people flock it.

as browsing , viewing spectacle of colours , moving imagery, ajax request works it's way through list of domains seeing if logged in of them.

any logged into, send ajax request page on site saves of data has found. way steal private information.

or, can post data forms on pages, along lines of "send me £1000 bank plz k thx".

http://en.wikipedia.org/wiki/same_origin_policy

why cross-domain ajax security concern?


Comments

Post a Comment

Popular posts from this blog

python - Does anyone know how to configure the hunpos wrapper class on nltk? -

-
i've tried following code , installed http://code.google.com/p/hunpos/downloads/list english-wsj-1.0 hunpos-1.0-linux.tgz i've extracted file onto '~/' directory and when tried following python code: import nltk nltk.tag import hunpos nltk.tag.hunpos import hunpostagger import os, sys, re, glob cwd = os.getcwd() infile in glob.glob(os.path.join(cwd, '*.txt')): (path, filename) = os.path.split(infile) read = open(infile) ht = hunpostagger('english.model') ht.tag(read.readline()) i following error traceback (most recent call last): file "<stdin>", line 4, in <module> file "/usr/local/lib/python2.6/dist-packages/nltk-2.0b9-py2.6.egg/nltk/tag/hunpos.py", line 46, in __init__ verbose=verbose) file "/usr/local/lib/python2.6/dist-packages/nltk-2.0b9-py2.6.egg/nltk/internals.py", line 503, in find_binary raise lookuperror('\n\n%s\n%s\n%s' % (div, msg, div...
Read more

mysql - How to insert just year and month into date field? -

-
i have column called table_date using now() insert current date ( 2011-02-23 ). know can manipulate sql/php show me year , monthname. however, want know if it's possible insert table_date current date year-month 2011-02 ? thanks a date field going full date, , far know, required specify full date. it might easiest use 01 , 2011-02-01 february 2011. obviously, can format output of date field liking when querying it: select date_format(fieldname,"%y-%m");
Read more