Anne van Kesteren wrote:
Yes. If I get all this stuff correctly a script could be running on bar.com using the XMLHttpRequest from another frame which is on foo.bar.com. Depending on which definition is used it can either access bar.com or foo.bar.com content (but not both), right?
Basically, yes. -Boris
