Cross domain script injection
Date: May 27, 2011 09:01PM
Hello,
Recently I came across a site that seems to have found a way to cause modal popups to get generated on domains (other than their own) by having the other domains include this single script tag:
<script src="http://ips-invite.iperceptions.com/webValidator.aspx?sdfc=5eee1f8c-52481-a0d314bd-9ae2-4304-a3f1-d97f21899083&lID=1&loc=STUDY&cD=90
&rF=True&iType=1&domainname=0"
type="text/javascript" defer="defer" >
</script>
It's just a crappy survey popup. But, I've been trying to figure out how this is done and am stumped. The closest I could get to something similar was JSONP - but that is clearly not what they are doing.
Does anyone know how this is done?
Thanks!