javascript - Are AJAX calls to a sub-domain considered Cross Site Scripting? -
Server A (www.example.com) is sending information to server B. I
A (and "crunching" on server B), I am trying to send form data via AJAX (server B is trying to avoid a form post - do not ask).
Obviously an AJAX call cross-domain is considered to be XSS and big no-no, but if I put server b into a subdomain (sub.example.com), would it be okay? Will you? How did cross-domain errors be detected? Does the browser see DNS records? IP address?
Thank you in advance for your help.
Subdomain is considered separate and as long as both sub-domains have the same Document.domain
do not declare a DOM property (and still, different browsers behave differently).
Comments
Post a Comment