The cross domain policy can block access between two different port on the same computer, between 80 (apache) and 8080 (tomcat).
If I use xssinterface without port, it doesn't work, if I specify ports, it doesn't work too. It's also true between different hosts.
I modify xssinterface to allow port specification, and I test it on Firefox3 (postmessage,cookies,gears), Firefox2 (cookies), IE7 (cookies) and Chrome (cookies,gears).
I also find a little bug with Firefox (doc.body instead of getElementsByTagName).
The patch include issue 4 (window.addEventListener)
I join new files + patch base on 0.5 release.
Comment #1
Posted on Nov 9, 2008 by Swift WombatHey, I am aware of the limitation with respect to ports and it is great that you are fixing it. Would you like to have commit access to the xssinterface repository to commit this yourself?
Comment #2
Posted on Nov 9, 2008 by Grumpy ElephantWhy not ;)
I can do that.
Comment #3
Posted on Nov 9, 2008 by Swift WombatCool, just sent me your Google Account email adress and I'll get you commit access (send it to malte.ubl@gmail.com)
Comment #4
Posted on Nov 19, 2008 by Grumpy ElephantHello,
you don't receive my 2 mails ? Maybe they appear as junk ... (@yahoo.fr)
My Google Account is nicolas.albert at gmail.com
Comment #5
Posted on Nov 19, 2008 by Swift WombatYou were indeed caught in Spam :( Access granted.
Comment #6
Posted on Nov 25, 2008 by Grumpy ElephantThe code is commited in trunk (rev 101)
Status: Fixed
Labels:
Type-Defect
Priority-Medium