Id like to know whether the following is possible or not due to the cross domain policy:
Main site <> intermediary iframe <> main iframe
Intermediary site spoofs it domain to look like it is main iframe.
It parses data to my spec and sends it to main site
Main site receives the data as it has allowed intemediary domain to send data
Is the above possible considering that iframes and cross domain policy is looking at domains and these can be spoofed as such
Main site <> intermediary iframe <> main iframe
Intermediary site spoofs it domain to look like it is main iframe.
It parses data to my spec and sends it to main site
Main site receives the data as it has allowed intemediary domain to send data
Is the above possible considering that iframes and cross domain policy is looking at domains and these can be spoofed as such