Posted by David Dorward on 08/20/06 11:18

David Smithz wrote:

> So the system does not work by submitting the correct parameters as a POST
> of whatever. The system works by taking control of the webpage in say a
> HTML frame, and actually then filling out the webform as if the user was
> typing it in.

Not possible. Cross domain scripting security prevents it.

> For example, the Bank Egg, has a feature called Money Manager. When you
> log in to Egg, it goes away and logs into all your other bank accounts for
> you to give you all your balances. This uses a feature where it controls
> the web browser to replicate typing in your username, password etc.
>
> However, before Egg can work it does install something onto your PC.

Which bypasses cross domain scripting issues by using a custom application
rather than a regular webbrowser.

> Now I was wondering if this was possible, but without the need for a
> locally stored application.

No.

--
David Dorward <http://blog.dorward.me.uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is

[Back to original message]