Domuk No, not an
issue with
the PHP - I
was
responding
to "AJAX not
being cross
site is
annoying"
MaxMouse Really? i
thought that
would only
be important
if the user
had some
kind of
control over
where the
XML came
from, if you
hard code it
(As in a PHP
file)
wouldn't
that
eliminate
XSS attacks?
Domuk Yes, but
very, very
necessary.
AJAX
requests run
in the
context of
the browser,
there'd be
no security
if it was
cross-domain
.
MaxMouse AJAX not
being cross
site is
annoying,
all other
scripts can
be used in
that way,
having to
resort to
PHP to patch
it is a
shame.
We always welcome any input from our visitors and members.
If you have comments or suggestions about the site, we would appreciate you submitting them via the feedback form. You might also want to visit our forums to see whether the topic has been mentioned by somebody else before.
Copyright Open Source Institute, 2006 