473,624 Members | 2,154 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Subdomain Ajax script denied access to primary domain

Using an AJAX Javascript function that works fine if it's in the primary
domain www.arnb.org, but suffers from a security error when attempted
from a subdomain, thepatsyreport. arnb.org

In the subdomain HTML I have a base statement, and set document.domain
to 'arnb.org' with Javascript
<base href="http://www.arnb.org" />

Anyone know how to get around this issue or tell me what I'm doing that
is wrong?

Name of test page:
http://thepatsyreport.arnb.org/indexx.php
The error can be created by clicking on the find icon after a band name.
(Looks like a magnifying glass)

Errors from Firefox console.(origin al directory name changed to
xxxxxxxxxx) As expected this also fails in IE7, Safari, and Opera

Security Error: Content at http://thepatsyreport.arnb.org/indexx.php may
not load data from
http://www.arnb.org/xxxxxxxxxx/Exter...&1219330078689.

Error: uncaught exception: [Exception... "Access to restricted URI
denied" code: "1012" nsresult: "0x805303f4 (NS_ERROR_DOM_B AD_URI)"
location: "http://www.arnb.org/xxxxxxxxxx/External.js Line: 35"]
Thank you
Arn
Aug 21 '08 #1
6 2041
totalstranger wrote:
Using an AJAX Javascript function that works fine if it's in the primary
domain www.arnb.org, but suffers from a security error when attempted
from a subdomain, thepatsyreport. arnb.org
Works as designed. RTFM, RTFFAQ (<http://jibbering.com/faq/>), STFW.
In the subdomain HTML I have a base statement, and set document.domain
to 'arnb.org' with Javascript
<base href="http://www.arnb.org" />
This is either a borken HTML fragment, or an XHTML fragment. It is
certainly not "Javascript ", whatever you imagine that to be.
Anyone know how to get around this issue
You cannot, short of compromising your system's security.
or tell me what I'm doing that is wrong?
Posting like a luser.

<http://catb.org/~esr/faqs/smart-questions.html>
PointedEars
--
Prototype.js was written by people who don't know javascript for people
who don't know javascript. People who don't know javascript are not
the best source of advice on designing systems that use javascript.
-- Richard Cornford, cljs, <f8************ *******@news.de mon.co.uk>
Aug 21 '08 #2
On or about 8/21/2008 3:50 PM, it came to pass that Thomas 'PointedEars'
Lahn wrote:
totalstranger wrote:
>Using an AJAX Javascript function that works fine if it's in the primary
domain www.arnb.org, but suffers from a security error when attempted
from a subdomain, thepatsyreport. arnb.org

Works as designed. RTFM, RTFFAQ (<http://jibbering.com/faq/>), STFW.
>In the subdomain HTML I have a base statement, and set document.domain
to 'arnb.org' with Javascript
<base href="http://www.arnb.org" />

This is either a borken HTML fragment, or an XHTML fragment. It is
certainly not "Javascript ", whatever you imagine that to be.
The base statement is not javascript a-hole, anyone proficient with HTML
would know that.
>
>Anyone know how to get around this issue

You cannot, short of compromising your system's security.
That's what document.domain is supposed to get around, however is
appears after additional reading it only works with Iframes.
>
>or tell me what I'm doing that is wrong?

Posting like a luser.
Learn to spell you schmuck.
>
<http://catb.org/~esr/faqs/smart-questions.html>
PointedEars
The problem with posting on groups like this is the a-hole/loosers who
choose to attack and diminish people who ask questions the
a-hole/loosers don't appreciate or feel they are above responding to in
a respectful manner.

Get a life.

You are officially plonked here, turd-blossom.
Aug 21 '08 #3
totalstranger wrote:
[...] Thomas 'PointedEars' Lahn wrote:
>totalstrange r wrote:
>>Using an AJAX Javascript function that works fine if it's in the primary
domain www.arnb.org, but suffers from a security error when attempted
from a subdomain, thepatsyreport. arnb.org
Works as designed. RTFM, RTFFAQ (<http://jibbering.com/faq/>), STFW.
>>In the subdomain HTML I have a base statement, and set document.domain
to 'arnb.org' with Javascript
<base href="http://www.arnb.org" />
This is either a borken HTML fragment, or an XHTML fragment. It is
certainly not "Javascript ", whatever you imagine that to be.

The base statement is not javascript a-hole, anyone proficient with HTML
would know that.
The `base' element is not a statement, as (X)HTML is a markup language and
not a programming language. Anyone with a minimum clue about (X)HTML would
know that.
[...]
You are officially plonked here, turd-blossom.
YMMD.
PointedEars
--
Use any version of Microsoft Frontpage to create your site.
(This won't prevent people from viewing your source, but no one
will want to steal it.)
-- from <http://www.vortex-webdesign.com/help/hidesource.htm>
Aug 21 '08 #4
totalstranger meinte:
>...luser...

Learn to spell you schmuck.
...loosers...
Now, that's funny.
--
http://photo.gregorkofler.at ::: Landschafts- und Reisefotografie
http://web.gregorkofler.com ::: meine JS-Spielwiese
http://www.image2d.com ::: Bildagentur für den alpinen Raum
Aug 21 '08 #5
On or about 8/21/2008 6:41 PM, it came to pass that Gregor Kofler wrote:
totalstranger meinte:
>>...luser...

Learn to spell you schmuck.
>...loosers.. .

Now, that's funny.

While not exactly the word I was seeking, it seems to fit PointedEars
quite well.

http://www.merriam-webster.com/dictionary/looser

4 a: lacking in restraint or power of restraint <a loose tongueb:
lacking moral restraint : unchaste c: overactive; specifically : marked
by frequent voiding especially of watery stools <loose bowels>

Aug 21 '08 #6
totalstranger wrote:
On or about 8/21/2008 6:41 PM, it came to pass that Gregor Kofler wrote:
>totalstrange r meinte:
>>>...luser.. .

Learn to spell you schmuck.
>>...loosers. ..

Now, that's funny.

While not exactly the word I was seeking, it seems to fit PointedEars

FYI
<url: http://en.wikipedia.org/wiki/Luser >

Andrew Poulos
Aug 22 '08 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
5045
by: Adrian | last post by:
can someone explain the cross domain security re AJAX in IE? I have a page that calls a web service (WS) from another domain (the target browser is only IE6) and displays it's results! all works fine when the page is run from my hdd, however when run from the web I get "Access denied" due to the cross domain security (I assume). So I set the browser setting to allow cross domain but this did not seem to work, I got the same error!
11
8587
by: vunet.us | last post by:
Since XMLHTTP Request does not support loading of XML from other servers, I decided to use a trick: load XML into hidden iframe and then get that XML with JavaScript to parse. But, is this a good idea? I am stuck. How do I get XML loaded in the iframe and pass it on to JS function for parsing? Thank you.
3
19860
by: markus.rietzler | last post by:
i want to do (multiple) file upload(s) and display a progress bar. with firefox and safari it is no problem at all. only IE makes some problems. my script is based on ajax-uploader, which can be found at www.srmiles.com/freestuff/ajax_file_uploader/ . you can do multiple file uploads. each upload will have it's own "form"-tag, so that each file is uploaded for its own. could be a good solution if there are "big" uploads.
2
1979
tolkienarda
by: tolkienarda | last post by:
hi all i have a wildcard subdomain that will redirect all subdomains to one page. this page is a php script that will read the what subdomain they entered and if it is valid it will redirect to the apporiate page and if not it will go the the home page. the reason i am doing this is because of a client who apparently has major intelligence issues. but the problem is that i don't know how to get the full url they entered in....
8
2797
by: stiv | last post by:
I want to give users of my site the option to register for a subdomain redirection service. I scanned the Internet for some script, but didn't really find anything that works. Tried the PHP script from http://opendomains.vnn.bz/ and many others. So now I want to ask you if you know of any script in PHP, Perl, Phyton that can accomplish this task?
2
8828
by: kpg | last post by:
I have an AJAX enabled web service consumed by an AJAX enabled web app, given a zip code it returns the city and state. Tested the web service, it works fine. I created a services collection in the script manager and pointed to my web service. I call the web service from an html input button click,
0
1292
by: Jeremy | last post by:
If I create a folder in outlook and give it a homepage url to an ajax asp.net page I've developed, I get ajax errors on my page when viewed in outlook. If I click on a button in an update panel I will get an Internet Explorer Script Error "Access is denied." If I clicke Yes to continue running scripts, and click the button in the update panel again I'll get an error "Sys.InvalidOperationException: Cannon abort when executor has not...
2
2099
by: RyanRitten | last post by:
Hey all, Quick question. My website is : http://mywebsite:1234 and I load into an IFRAME this url : http://anotherwebsite:2828
3
3507
by: sarika | last post by:
Hi all I m making a website in which i have used ajax technology . When i make a page request throght ajax it works fine in IE but giving problems in Mozilla .In mozila i m getting 403 status code with"Error 403 "Access Denied/Forbidden"" . Though same script is working fine in mozilla when run through other server. Please reply asap.
0
8234
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8677
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
8474
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7158
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6110
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5563
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4079
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
1784
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
2
1482
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.