Article: Harnessing AJAX, XSLTProcessor using Java Servlets continued (Cross Side Scripting Test)

This page allows you to test the cross-side scripting in various browsers. The link on the upper left makes an Ajax call to the RSS Feed from TheServerSide and extracts the "description" field and replaces it for the proverb on the upper right. If this script fails, then that version of browser does not allow cross-side scripting.

A little tip for FireFox browsers, if you have a sniffer or LiveHttpHeader add-on, what you should observe is that eventhough in older FF browsers, the "same-domain policy" is implemented... The URL call goes through and the request is sent to the server and a valid response is returned. But then the browser makes the "same-domain policy" test at which point it fails and you can't access the returned response. But using this, you may be able to utilize this functionlity to your advantage. So basically you can send data to a cross-domain server but you can't access the response. But this feature may not work in the future.