A way around XSS?
- by rushonerok
In my page I have an script reference to the autoHeight.js file below. I also have an iframe that I want to resize using this code. In firebug I get this error
Error: Permission denied for <http://www.siena.edu> to get property HTMLDocument.body from <https://siteframework.siena.edu>.
Source File: https://siteframework.siena.edu/FormManager/action/v2/autoHeight.js
Line: 4
I am assuming it is because they are on different domains that it won't execute it. This is to prevent XSS right? Is there a way around it?