localStorage, indexedDB, BroadcastChannel, SharedWorker). For example, it will throw a " SecurityError" DOMException if the document-domain Feature-Policy is enabled or the document is in a sandboxed, and changing the origin in this way does not affect the origin checks used by many Web APIs (e.g. It has to be set in both so their port numbers are both null. Therefore, one cannot make :8080 talk to by only setting document.domain = "" in the first. Any call to document.domain, including document.domain = document.domain, causes the port number to be overwritten with null. The port number is checked separately by the browser. ![]() However, could not set document.domain to, since that is not a superdomain of. ![]() Afterward, the page can pass the same-origin check with (assuming sets its document.domain to " " to indicate that it wishes to allow that - see document.domain for more).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |