What Browsers Allow Cross-Origin XMLHttpRequest From Local Files? - browser

I know Internet Explorer 8 allows cross-domain XHR from LOCAL files, but what about other browsers? I'd like to know about what versions/OS this will work on (if any) for each of the major 5 browsers. Please include any workarounds like Chrome's --disable-web-security flag.
Thanks!

well here is a nice blog abt cross domain requests: http://caffeinelab.net/2011/02/08/cross-domain-requests-state-of-the-browsers/
IE provides access control to do cross-domain requests. Now the bad
news: as usual, IE can’t do like the others and they have their own
non-standard way to provide it.
Instead of a regular XMLHttpRequest, you need to do a XDomainRequest!
Moreover, it works only for public pages, not for authenticated pages.
So if you need to send he cookies and you want your application to
work in IE, you’re pretty much screwed.
and here is how you do it in FFX: http://dirolf.com/2007/06/enabling-cross-domain-ajax-in-firefox.html
Not sure about safari, but Chrome has a command line switch for this:
chrome.exe --disable-web-security
Keep in mind when you enable this you are risking your security when you visit other sites. so be careful
hope this helps

In Safari you can enable the Develop menu (Safari → Preferences → Advanced → Show Develop menu in menu bar). There you can disable cross-origin restrictions (Develop → Disable Cross-Origin Restrictions).

Related

Relatve URL in distant file (XLS)

I have a problem at my job.
I am totally dependent on a website which must certainly date from the eighties ...
In one of the web pages, there is a link to download an excel file (xls). Let's say for example http://example.excel.xls
In this file, there are hyperlinks to other files (sometimes i think the death penalty is a good thing! ^^).
These links are relative :'( (for example \myfile.pdf)
Internet explorer, strangely, are correcting these links by transforming them in absolute path (http://example.myfile.pdf)
Other browsers (chrome, firefox, even the old edge) don't do it natively. By clicking on the link, we arrive in the local cache, where of course there arenot my files ...
I will soon have to remove IE from computers.
I had considered sending a bombshell on the administrators of this website, but afraid of legal repercussions :)
Is it possible, via settings, an addon or whatever, to make one of the browsers behave in the same way as IE?
I am very grateful for the help you will give me
You had asked,"Is it possible, via settings, an addon or whatever, to make one of the browsers behave in the same way as IE?"
I suggest you make a test with the MS Edge (Chromium) browser.
The MS Edge (Chromium) browser comes with the IE mode feature.
IE mode on Microsoft Edge makes it easy to use all of the sites your organization needs in a single browser. It uses the integrated Chromium engine for modern sites, and it uses the Trident MSHTML engine from Internet Explorer 11 (IE11) for legacy sites.
To configure IE mode, I suggest you refer to Configure IE mode policies. You can refer to the document and configure the necessary policies to enable the IE mode.
It can help you to load your legacy site in the Edge browser using the IE mode which can help you to fix the said issue.

Disable Chrome iframe security for just one website

I need to disable Chrome's iframe security for just one page so that I can access the contents of cross-domain websites.
I have complete control over this browser, this can use extensions.
I have been looking for a way to do this for the past hour or so. No luck.
You can try out this extension to bypass when development, this will allow you to resolve the issue with cross-domain issue:
https://chrome.google.com/webstore/detail/cross-domain-cors/mjhpgnbimicffchbodmgfnemoghjakai
Disclaim: I am the owner of this extension.

Disabling pop-up of secure and non-secure content in Internet Explorer

I have few images on a web page which are fetched from HTTP server while whole web page is on HTTPS. So in Internet Explorer 7 and 8 I get this pop up:
This page contains both secure and non-secure items
Majority of users use Internet Explorer. Somehow they are getting worried about this pop-up. Even though I told some of the users about settings in IE, I dread telling everyone.
Does anyone know how I can disable this pop-up through JavaScript or any other way where the control will be in my hands?
You can't disable the popups. If you could, that's what the bad guys would do, and then there'd be no point to the security popup.
Move your images to your secure server, and the popups will go away because there's nothing being served unsecurly on a secure page.
No you cannot disable it. It is a security feature of the browser. It prevents possible cross site scripting XSS for secure sites.
Your best bet is to host all images, css, javascripts, etc from the secure server also.
Go to internet explorer-tools-security tab-custom level-scripting-active scripting-disable.
This should solve the problem

Is it possible to set a cookie from a browser plug-in?

Do browser plug-ins, such as the Yahoo toolbar or others, have the ability to set cookies on multiple domains as the user browses the web? Does the browser expose the necessary access to do this to a plug-in? If this varies across browsers, that would be helpful to know as well.
Thanks!
Cookies are stored in files and real plugins (i.e. ones using NPAPI rather than the browser's addon/extension engine) can read/write files. Hence, it's possible to do for any browser this way, although not really straightforward.
Firefox exposes cookies even to addons since there are cookie editor addons (that can edit cookie for any site).
Chrome/Chromium allows setting of cookies through "content scripts" that run in the context of a page (any page) - that's only in the beta branch so far, but soon to be in stable. However, the downside is that you might have to visit the site for it to work (you could fake that using iframes).
No idea about Opera.
The only one I have found that works quite well for creating/updating/viewing cookies is Firecookie

What aspects of a Web Browser should be configurable via plugins?

I'm looking at this from the perspective of the plugin developer not the user of the browser, so I'm interested in what developers think is the ideal interface for plugins to a browser. For example: Plugins can reorder, create and destroy Tabs, Plugins can draw behind and in front of Browser pages etc.
I'm particularly concerned about the security aspects
A web browser should have a firebug plug inn which help the developers.Concerned about security browser should block Phishing.
The major thing that I look for right away is how easy it is to open a preference pane, new windows, and the security preference variables.
I also like the ability to iterate through tabs, searching through various aspects such as page currently displayed within each of those tabs.

Resources