XmlDoc.getElementsByTagName("street").childNodes.nodeValue ĭocument.getElementById("city").innerHTML= XmlDoc.getElementsByTagName("streetNumber").childNodes.nodeValue ĭocument.getElementById("street").innerHTML= XmlDoc=new ActiveXObject("Microsoft.XMLDOM") ĭocument.getElementById("num").innerHTML= XmlDoc=parser.parseFromString(txt,"text/xml") I was able to load xml contents into html in chrome by storing the xml as variable in javascript as shown below. Upload it to a host, and everything will be fine. Try running chrome with the -allow-file-access-from-files switch (I've not tested this myself) I do agree it's annoying, as a fix you've got 2 solutions: There is nothing Gmail can do to defend itself from this attack. Now the attacker has your inbox, which may be useful for spamming or identify theft. The local web page places the contents of your inbox into a and submits the data via a form POST to the attacker's web server. (An Internet web page would not be able to perform this step because it would come from a non-Gmail origin the same-origin policy would cause the read to fail.)
The local web page reads the contents of the frame by using JavaScript to access. īecause you are logged in to Gmail, the frame loads the messages in your inbox. The local web page creates an whose source is. You open the now-local web page in your browser. You receive an email message from an attacker containing a web page as an attachment, which you download. The justification given by the Chrome team in 2008 was this: CSS files in the same directory just fine.
The reason this doesn't work is due to a security concern that Chrome has addressed in a controversial way, by blocking XML files from accessing local XSLT files in the same directory, while HTML files can access. You might notice that the XSL file is actually a PHP file, but this works fine in other browsers and I've tried changing it to. and then the linked XSL file which looks like this. I have an XML document that looks like this. but I can not, for the life of me, figure out what my problem is! Google Chrome just displays a blank page when I try to transform XML with XSL. I've seen plenty of posts all around about this.
0 kommentar(er)
