Tunneling and proxy servers for Ajax and beyond

Monday, December 10, 2007

Because of its ability to communicate with the server, the XMLHttpRequest object (XHR), used in technology Ajax (short for Asynchronous JavaScript and XML, whose pronunciation would be "egiacs" even if we Italians prefer "aiacs"), has a block of protection that prevents him from running applications outside the domain in which it operates. This protection is needed to prevent Javascript Injection (techniques of "injection" extremely dangerous code in order to violate the system) of varied types, with the ultimate goal of "break" in the system.
This limit is now taken seriously and is thinking in some way to resolve it - directly into XMLHttpRequest - without jeopardizing the security (see also: Third proposal for cross-site extensions to XMLHttpRequest).

Nevertheless, the situation today is as follows:

XHR

Continue to read ... "

Related Post