September 25
Cross domain POST without security
I would have bet that browsers imposed restrictions against this… but seems that they do not.
Check the following question from Webmasters @ StackExchange: Can I do a non-hostile cross-domain POST now?
And seems it is totally feasible:
<html>
<body>
<form method="POST" action="http://www.automatumvitae.com/testPostReceiver.php">
<input type="text" name="text" />
<input type="submit" />
</form>
</body>
</body>
<html>
<body>
<p><?php
if (isset($_POST['text'])) {
$text = htmlspecialchars($_POST['text']);
echo "Succeded! Submitted value: $text";
} else {
echo "Didn't receive anything. :(";
}
?></p>
</body>
</body>
You can actually try this out at http://www.alphasmanifesto.com/tests/testPostSender.php
[...] Hice un pequeño post sobre Cross Domain POST Requests. Aparentemente no hay nada que los detenga de ocurrir. Si bien eso no es noticia, me pregunto por qué hay problema con Cross Site Ajax Requests y no con esto. El post y una pequeña prueba están aquí. [...]