3 ms·
Won't the same origin policy kick in the moment I try to read the content of an iframe that isn't on the same origin as my website? Or is this meant to run on
by captn3m0 7y ago
Won't the same origin policy kick in the moment I try to read the content of an iframe that isn't on the same origin as my website?
Or is this meant to run on the dev console on the target website? In which case, the iFrame and the Airovic website doesn't make sense (the electron app mentioned does sure, but it doesn't exist)
- nodelessness 7y agoThat was my thinking as well. You cannot access another website's content opened via iframe via Javascript at all.
- onlyrealcuzzo 7y agoI think you first visit the website, then you inject an iframe onto the page you're currently on, and then inside that iframe you can scrape any content on that website. That's at least what it looked like from his examples.
- natzar 7y agoIf you use an iframe yes, that is the problem. But the airovic.com tool uses and external script, in the same server that provides http tunneling from same server, so I can modify headers and display everything on the iframe because it is under same domain. Thanks for your comment!