All geek questions in one place

Can I enable XSS in my browser locally?

I am developing a widget (HTML, JavaScript) for a platform that allows (trusted) widgets to make XSS calls.

I can test the code by packing the widget and using the emulator, but it takes 2 or 3 minutes to reload every time I make simple JavaScript code.

Is there a way to enable XSS support in Firefox or any other browser that will work on Linux? I just want it to be personally for me personally, so the settings, plugins, hacks or something else are acceptable.

+4
source share
2 answers

For XMLHttpRequest, insert this before calling open:

netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead');

See http://www.zachleat.com/web/2007/08/30/cross-domain-xhr-with-firefox/ for more details. (May not apply to Fx 3)

+1
source

You can make cross-site calls using the extension in Google Chrome. See here for more details. Of course, this means that your application has a special "debugging path" that may not be acceptable ... you can always pull it out; -)

0
source

Source: https://habr.com/ru/post/1302056/

More articles:


All Articles