Changing document.domain to completely other domain
Posted
by Sergej Andrejev
on Stack Overflow
See other posts from Stack Overflow
or by Sergej Andrejev
Published on 2010-04-08T14:28:32Z
Indexed on
2010/04/09
1:43 UTC
Read the original article
Hit count: 323
JavaScript
I'm trying to prove that changing document.domain can be used only for cross scripting on the same upper level domain. For example if i will try to change document.domain to "google.com" on page which is located on www.test.com I will get a security exception in FF. Does anybody know where to locate an official proof of that?
© Stack Overflow or respective owner