Cross Domain Form POSTing

by

The same origin policy is applicable only for browser side programming languages. So if you try to post to a different server than the origin server using JavaScript, then the same origin policy comes into play but if you post directly from the form i.e. the action points to a different server like:

<form action="http://someotherserver.com">

and there is no javascript involved in posting the form, then the same origin policy is not applicable.

See wikipedia for more information

More Related Contents:

  1. Is either GET or POST more secure than the other?
  2. How to allow http content within an iframe on a https site [duplicate]
  3. Max parallel HTTP connections in a browser?
  4. Is it valid to replace http:// with // in a ?
  5. What is the boundary in multipart/form-data?
  6. Disabled form inputs do not appear in the request
  7. Is a URL allowed to contain a space?
  8. Using PUT method in HTML form
  9. URI starting with two slashes … how do they behave?
  10. How to escape hash character in URL
  11. Two forward slashes in a url/src/href attribute [duplicate]
  12. Why is it common to put CSRF prevention tokens in cookies?
  13. Can local storage ever be considered secure? [closed]
  14. Example of multipart/form-data
  15. Is it possible to put binary image data into html markup and then get the image displayed as usual in any browser?
  16. access iframe content from a chrome’s extension content script
  17. Browser Caching of CSS files
  18. Should PUT and DELETE be used in forms?
  19. HTML5 localStorage security
  20. Disabling Safari autofill on usernames and passwords
  21. How to avoid sending input fields which are hidden by display:none to a server?
  22. Large file upload though html form (more than 2 GB)
  23. What characters must be escaped in an HTTP query string?
  24. HTML5 Canvas getImageData and Same Origin Policy
  25. How to download HTTP directory with all files and sub-directories as they appear on the online files/folders list?
  26. Can’t show some websites in iframe tag
  27. Open a direct file on the hard drive from firefox (file:///)
  28. Browser Canvas CORS Support for Cross Domain Loaded Image Manipulation
  29. What does the question mark at then end of a css include url do?
  30. WebSocket server implementations for Delphi [closed]

Leave a Comment