XMLHTTPReqest “Ping” Sweeping in Firefox 3.5+ ha.ckers.org web application security lab（情報元のブックマーク数）

よくわからん。

Jeremiah brought my attention to the new Firefox 3.5+ CORS (Cross-Origin Resource Sharing) which is a way to do a cross domain XMLHTTPReqest. Does that sound scary? Well, it is, but there’s been a ton of work into hardening it. It has all sorts of cross domain opt-in verification built into it to limit the abuse. Honestly, if you look at the people who were acknowledged in it’s construction, it’s a who’s who of people who understand cross domain browser security issues. So it wasn’t surprising that it was fairly free of obvious flaws.

http://ha.ckers.org/blog/20090720/xmlhttpreqest-ping-sweeping-in-firefox-35/