Domuk No, not an
issue with
the PHP - I
was
responding
to "AJAX not
being cross
site is
annoying"
MaxMouse Really? i
thought that
would only
be important
if the user
had some
kind of
control over
where the
XML came
from, if you
hard code it
(As in a PHP
file)
wouldn't
that
eliminate
XSS attacks?
Domuk Yes, but
very, very
necessary.
AJAX
requests run
in the
context of
the browser,
there'd be
no security
if it was
cross-domain
.
MaxMouse AJAX not
being cross
site is
annoying,
all other
scripts can
be used in
that way,
having to
resort to
PHP to patch
it is a
shame.
You must be logged in to access the Geek Challenges!
The Geek Challenges are a series of computing related tests where you can earn reward points, and prove your programming prowess. There are many skills tested, from reverse engineering, general computing, brute forcing, steganography, audio manipulation, cryptography and complex maths puzzles.
Copyright Open Source Institute, 2006 