XSS Domain and Sub-domain

Question

I want to access the resources of
http://abc.example.com
on
http://example.com.
Is this a violation of the Same origin policy?

I am not able to test it because I am designing something and do not have server access to validate the same.

https://stackoverflow.com/questions/6277926/javascript-access-from-parent-domain-to-subdomain — Andreas Zita, Jun 02 '17 at 08:51
Possible duplicate of [JavaScript access from parent domain to subdomain?](https://stackoverflow.com/questions/6277926/javascript-access-from-parent-domain-to-subdomain) — Gabor Lengyel, Jun 02 '17 at 09:09

Erlend · Answer 1 · 2017-06-03T08:07:30.203

0

Even though you dont have server access, you can still test this. Set up a simple webserver on your laptop and modify your hosts file. Next lookup the definition of origin: Port, protocol and full hostname. Same origin policy be relaxed by setting document.domain on subdomain or using CORS headers.

edited Jun 03 '17 at 08:07

answered Jun 03 '17 at 07:33

Erlend

4,336
22
25

XSS Domain and Sub-domain

1 Answers1