DotNetWise©

Tuesday, November 10, 2009

EasyXDM, the best Cross-Domain XSS / XDM javascript solution

There are tons of posts and articles about cross-domain communication and Same Origin Policy limitations on the web, but none of them are providing you a real browser-transparent solution.

After I dug over a month in this area, I have finally found the best solution!
It is called EasyXDM, and I really want to thank to oyvind for it.

I'm not going to write just yet of how easy can it be used but you can read here

There was a bug on the Tests suite that was crashing Google Chrome and Safari browsers but I have fixed it here. Be aware that the tests are forced to run in all the transports and some of them are expected to fail in certain browsers. However all of them should pass on the "Best Transport" tests suite.
[Update: Oyvind has also updated the test suite here]

For those who don't want to spend a month doing the research they can start with these resources:

http://www.slideshare.net/mehmetakin/ajax-world
http://www.slideshare.net/kuza55/same-origin-policy-weaknesses-1728474
http://easyxdm.net/
http://kinsey.no/blog/index.php/2009/08/20/easyxdm/
http://msdn.microsoft.com/en-us/architecture/bb735305.aspx
http://code.google.com/apis/gears/gears_faq.html#crossOriginWorker

Enjoy cross domain re-usable applications!

1 comment:

  1. I'm not sure if I would call commenting out the .destroy() code a fix :)
    Anyways, a very small change to the test suite framework was all that was needed to fix the issue with WebKit.

    ReplyDelete

 
Blog powered up by Blogger