search

sudipto1989 / xssinterface

Automatically exported from code.google.com/p/xssinterface
0 stars 0 forks source link

xssinterface doesn't support host+port #5

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
The cross domain policy can block access between two different port on the
same computer, between 80 (apache) and 8080 (tomcat).

If I use xssinterface without port, it doesn't work, if I specify ports, it
doesn't work too. It's also true between different hosts.

I modify xssinterface to allow port specification, and I test it on
Firefox3 (postmessage,cookies,gears), Firefox2 (cookies), IE7 (cookies) and
Chrome (cookies,gears).

I also find a little bug with Firefox (doc.body instead of
getElementsByTagName).

The patch include issue 4 (window.addEventListener)

I join new files + patch base on 0.5 release.

Original issue reported on code.google.com by nicolas....@gmail.com on 9 Nov 2008 at 9:17

Attachments:

GoogleCodeExporter commented 8 years ago 
Hey, I am aware of the limitation with respect to ports and it is great that 
you are
fixing it. Would you like to have commit access to the xssinterface repository 
to
commit this yourself?

Original comment by malte.ubl on 9 Nov 2008 at 11:28

GoogleCodeExporter commented 8 years ago 
Why not ;)

I can do that.

Original comment by nicolas....@gmail.com on 9 Nov 2008 at 1:16

GoogleCodeExporter commented 8 years ago 
Cool, just sent me your Google Account email adress and I'll get you commit 
access
(send it to malte.ubl@gmail.com)

Original comment by malte.ubl on 9 Nov 2008 at 1:58

GoogleCodeExporter commented 8 years ago 
Hello,

you don't receive my 2 mails ? Maybe they appear as junk ... (@yahoo.fr)

My Google Account is nicolas.albert at gmail.com

Original comment by nicolas....@gmail.com on 19 Nov 2008 at 7:07

GoogleCodeExporter commented 8 years ago 
You were indeed caught in Spam :( Access granted.

Original comment by malte.ubl on 19 Nov 2008 at 7:13

GoogleCodeExporter commented 8 years ago 
The code is commited in trunk (rev 101)

Original comment by nicolas....@gmail.com on 25 Nov 2008 at 2:35