Changing document.domain to completely other domain

Posted by Sergej Andrejev on Stack Overflow See other posts from Stack Overflow or by Sergej Andrejev
Published on 2010-04-08T14:28:32Z Indexed on 2010/04/09 1:43 UTC
Read the original article Hit count: 323

Filed under:

I'm trying to prove that changing document.domain can be used only for cross scripting on the same upper level domain. For example if i will try to change document.domain to "google.com" on page which is located on www.test.com I will get a security exception in FF. Does anybody know where to locate an official proof of that?

© Stack Overflow or respective owner

Related posts about JavaScript