Content-Type: text/plain; charset="ISO-8859-1" Message-ID: <2039665.suKHd0m0Yc@PointedEars.de> From: Thomas 'PointedEars' Lahn Reply-To: Thomas 'PointedEars' Lahn Organization: PointedEars Software (PES) Date: Sun, 11 Nov 2012 19:23:20 +0100 User-Agent: KNode/4.4.11 Content-Transfer-Encoding: 7Bit X-Face: %i>XG-yXR'\"2P/C_aO%~;2o~?g0pPKmbOw^=NT`tprDEf++D.m7"}HW6.#=U:?2GGctkL,f89@H46O$ASoW&?s}.k+&. <2261899.gBobAo4G4S@PointedEars.de> <4265d7df-81e2-4c58-a16d-cafc435a1e88@j19g2000vba.googlegroups.com> <28208070.qZZrvzLHK0@PointedEars.de> <4351338.UcPtXxdYxD@PointedEars.de> <1870325.DxoWjsJ0Ul@PointedEars.de> <5115212.H4Pzn9t7sn@PointedEars.de> Followup-To: comp.lang.javascript MIME-Version: 1.0 Lines: 42 NNTP-Posting-Date: 11 Nov 2012 19:23:21 CET NNTP-Posting-Host: 8521d75d.newsspool1.arcor-online.net X-Trace: DXC=EX0S^X7SQ[F0YVY]kmLTlDic==]BZ:afN4Fo<]lROoRAnkgeX?EC@@@gVYO=MmT0fJDZm8W4\YJNLJ`:FmdeL>K@l>hCXB2:Z4F@3fUYg;SkgL X-Complaints-To: usenet-abuse@arcor.de Path: csiph.com!usenet.pasdenom.info!news.stben.net!border3.nntp.ams.giganews.com!border1.nntp.ams.giganews.com!nntp.giganews.com!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!newsfeed.arcor.de!newsspool1.arcor-online.net!news.arcor.de.POSTED!not-for-mail Xref: csiph.com comp.lang.javascript:17172 Cezary Tomczyk wrote: > W dniu 2012-11-11 15:22, Thomas 'PointedEars' Lahn pisze: >> Cezary Tomczyk wrote: >>> W dniu 2012-11-10 20:50, Thomas 'PointedEars' Lahn pisze: >>>> BTW, iframe cross-domain scripting requires a proper `X-Frame-Options' >>>> response header field value in case document.domain is not applicable. >>> Which mostly should not be a problem to set this header. >> How so? > > I do not understand your question. I was thinking about sending header > from server with "X-Frame-Options" which should be easy if you have > access to server. IMHO, the most likely use-case scenario for this header field is that you do _not_ have access to the server, and that the person providing a service that you want to use sets it for a specific resource. > As for X-Frame-Options I found more about that here: > https://developer.mozilla.org/pl/docs/The_X-FRAME-OPTIONS_response_header Exactly. >> Please trim your quotes to the relevant minimum. > > Sometimes it's hard do define what is "relevant minimum". Everybody has > a own definition. While that is true, quoting *everything* from a 100+ lines posting as you did e. g. in certainly is not appropriate by any reasonable measure as it wastes precious resources (space, time, nerves) needlessly. You can [summarize] if all else fails. See also PointedEars -- Anyone who slaps a 'this page is best viewed with Browser X' label on a Web page appears to be yearning for the bad old days, before the Web, when you had very little chance of reading a document written on another computer, another word processor, or another network. -- Tim Berners-Lee