Xsstc: Cross-site scripting through CSS data, as you can see from the name, run script across sites through CSS, how to use:
import xsstcx.js (uncompressed version of xsstc.js)
Add an empty DIV with id="Xsstc".
Call Xsstc.exec(functionURL, callback) in JS, and the content used is passed into the callback as a parameter of the callback.
The definition of CSS is also required. The following is the definition
CSS code
of CSS in Hello World.
Xsstc {
background-image: url('about:blank#Hello%20World');
}
JavaScript code
Xsstc.exec('http://lbs.tralfamadore.com/test.css', showResponse)
Reference document:
Original description: http://ajaxian.com/archives/xsstc-cross-site-scripting-through-css- data
test page: http://www.tralfamadore.com/test-xsstc.html