javascript - Are AJAX calls to a sub-domain considered Cross Site Scripting? -


Server A (www.example.com) is sending information to server B. I can be on the HTML / JS server only

A (and "crunching" on server B), I am trying to send form data via AJAX (server B is trying to avoid a form post - do not ask).

Obviously an AJAX call cross-domain is considered to be XSS and big no-no, but if I put server b into a subdomain (sub.example.com), would it be okay? Will you? How did cross-domain errors be detected? Does the browser see DNS records? IP address?

Thank you in advance for your help.

Subdomain is considered separate and as long as both sub-domains have the same Document.domain do not declare a DOM property (and still, different browsers behave differently).


Comments

Popular posts from this blog

windows - Heroku throws SQLITE3 Read only exception -

lex - Building a lexical Analyzer in Java -

python - rename keys in a dictionary -