Home/ Questions/Q 119267
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T03:37:34+00:00

I want to write some javascript and have it call into the DOM for

  • 0

I want to write some javascript and have it call into the DOM for a page I am loading from a 3rd party domain. Can this be done? This looks like what I’ve already tried using IFRAME but it would seem that doesn’t work. Is these some other way like having FF run some javascript directly rather than as part of a page?

I know this has all kinds of security problems but I’m the guy writing the code and the only guy who will run it.

The backstory: I’m trying to automate some web site iterations.

My fist IFRAME pass didn’t work because a web page from file:////.... is not in the same domain as a page in http://whatever.com. Surprise, surprise.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. If I understand the question correctly, you probably won’t be able to do it using Javascript alone, because of the domain restriction that you experienced. However, if you have some knowlege on using shell scripts, or any scripting language, it should be no problem, all you need to do is invoke the good old curl.

    Example in PHP:

    <?php $url = 'http://www.example.com/index.html'; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0'); $fp = curl_exec($ch); curl_close($ch); ?>

    And that’s pretty much it. You have the actual HTML code in the $fp variable. So, all in all, what I would do is write a little Javascript Ajax function to PHP which does the curl and then returns the $fp variable via echo to the Javascript callback, and then maybe insert it on the document (using innerHTML or the DOM), and bam, you have access to all the stuff. Or you could just parse it in PHP. Either way, should work fine if you do it through curl. Hope that helps.

    Edit: After some thought I seem to remember that Safari removes the cross domain restriction for localhost. After researching some more, I’m unable to find any documentation that supports this theory of mine, so I dug a little deeper and found a better (although hackier) way to accomplish this whole mess via Apache if you’re using it (which you probably are).

    Apache’s mod_proxy will take a request for something like “/foo” and actually tunnel the request to some remote destination like “http://dev.domain.com/bar”. The end result is that your web browser thinks you’ve made a call to http://localhost/foo but in reality you’re sending and retrieving data from a remote server. Security implications solved!

    Example:

    LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_http_module modules/mod_proxy_http.so LoadModule rewrite_module modules/mod_rewrite.so

    Let’s assume that I want to access a file at http://dev.domain.com/remote/api.php. You would put all of the following into a :

    # start mod_rewrite RewriteEngine On ProxyRequests Off <Proxy>    Order deny,allow    Allow from all </Proxy>  ProxyPass /apitest/ http://dev.domain.com/remote/api/ ProxyPassReverse /apitest/ http://dev.domain.com/remote/api/ RewriteRule ^/apitest/(.*)$ /remote/api/$1 [R]

    Source

    More edit:

    Seeing as how you want to avoid the whole server setup thing, I gave it a shot using an IFRAME on Safari (Mac), and it worked, at least for the domains I tried:

    <!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Frameset//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd'> <html> <head> </head>     <body>         <iframe src='http://www.stackoverflow.com/'></iframe>     </body> </html>
    • 0