+1-888-365-2779
Try Now
More in this section

Forums / Developing with Sitefinity / RadWindow and Cross Site scripting

RadWindow and Cross Site scripting

3 posts, 0 answered
  1. Petr
    Petr avatar
    34 posts
    Registered:
    03 Jan 2011
    05 Mar 2011
    Link to this post
    Hi,

    I need to open from GenericContentDesigner new Window with page from another domain (I'm using RadWindow for this). I've tried to use document.domain for setting same domain, but if I do this, I received a lot of error messages from RadEditor (after I click to this button, which open another url and set the new domain).

    Please, have you got any idea, how to pass parameter into RadEditor from page on another domain?

    Thanks

    Petr
  2. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    25 Nov 2016
    07 Mar 2011
    Link to this post
    Hi Petr,

    When the domain is different this will result in cross site scripting. When the domain is the same there should not be an issue.

    Greetings,
    Ivan Dimitrov
    the Telerik team
    Registration for Q1 2011 What’s New Webinar Week is now open. Mark your calendar for the week starting March 21st and book your seat for a walk through all the exciting stuff we ship with the new release!
  3. Petr
    Petr avatar
    34 posts
    Registered:
    03 Jan 2011
    07 Mar 2011
    Link to this post
    Hi,

    the last string in the domain is same, but the rest not. We have:

    server1.xxx.yyy.ourdomain.com

    and

    server2.xxx.yyy.ourdomain.com

    If I set via document.domain="ourdomain.com", it doesn't work. If I try to set "xxx.yyy.ourdomain.com", this is not acceptable by JavaScript (invalid domain name).

    Any ideas, how to transfer string from server2 to RadEditor on server1?

    Thanks

    Petr
Register for webinar
3 posts, 0 answered