how to do cross-site scripting?

I know cross-site scripting is disabled in browsers to prevent phishing.

But this is preventing me from using it in a good application. I'm trying to set content in form input fields in an iFrame. It works if the page within the iFrame is on my domain, but I get 'Permission denied to get property HTMLDocument.forms' errors if the page in the iFrame is on another domain.

Is there any possible way around this? Would GreaseMonkey work?

 

Hmm, so you trying to modify the attributes of an IFramed element that is loaded from a different site? If this was possible, all people would beautifully styled AdSense Ads. Their might be a way... but you might need to install an activex or an app (called a trojan) on another persons box

 

Actually, can you tell me why lots of people have SevenSeek Web Directory Avatars? I run http://www.SmashingDir.com - are you affiliated with seven seek? or did the owner run some kind of promotion?

Thanks

 

Not only SevenSeek, also SiteSift, and others.
There are volunteer users and paid users (more posts = more money).
You can read several threads for this Avatar craziness

 

you can't do it in pure javascript, you can if you use a bit of php as well though.

 

Yeah, looks like I'm going the PHP route, thanks