it’s most unfortunate that it’s not implemented within your code and I must say I wouldn’t know personally how to add it.. I hope that this could be solved on your hands because it’s messing things up when the browsers try to parse the results returned especially when it’s off another domain.

thanks alot!

it works! this is very useful for me to have one login process for two separate domains (one is .info, the other is .com). while i can’t provide an example, it is a much better process than the previous method of forcing a pop up to do the work (which got blocked more often than not). thank you so much!!

Test;
JAVASCRIPT;
echo ‘var ‘.$_GET['XssHttpRequestVar'].’ = “‘.addslashes($script).’” ;’;
?>

I get this output:
This is a Test;

What can I do to get a valid XHTML Tag ??

My question is, does it neccessary to eval the responsetext.
Once you got the response, that’s all you wanted.

Does the browser evaluate the java script automaticly when you created a javascript object, or you have control over this?

PS: I still hope they would change ajax behavior in the future, so we don’t have to work around like this.

For anyone like me who’s run out of Redbull and therefore can’t think before midday, you can replace the alert() between the ‘JAVASCRIPT’ lines in the PHP file with whatever you like basically, eg: