xhr - A small xhr wrapper

•    Javascript

---

A small XMLHttpRequest wrapper. Designed for use with browserify, webpack etc. API is a subset of request so you can write code that works in both node.js and the browser by using require('request') in your code and telling your browser bundler to load xhr instead of request.

browserify webpack xhr xmlhttprequest request http cross-origin xhr2

across-tabs - Easy communication between cross-origin browser tabs

•    Javascript

---

Note: Use the desired version of the library in place of 1.0.0. Checkout cdnjs across-tabs.

browser-tabs tabs-comunication postmessage tabs communication-library communication-channel handshake-mechanism cross-origin sessionstorage es6 webpack karma-plugin jasmine-tests istanbul isparta babel tabs-api event-driven new-tab across-tabs tabs-communication tabs-postmessage umd commonjs

postit - An elegant wrapper for postMessage

•    Javascript

---

An elegant wrapper for postMessage.Install postit-js as a dependency.

postit postit-js postmessage cross-window cross-origin cross-domain browser

angular-cors - Fast CORs support for angular1

•    Javascript

---

Fast CORs support for angular1

patrick patrickjs gdi2290 angular angularjs angular.js cors angular-cors ngcors cross-origin

sandblaster - A client-side JavaScript library to detect if your code is running inside of a sandboxed iframe

•    Javascript

---

The sandbox attribute of the iframe element (new in HTML5, supported in IE10+ and all other evergreen browsers) provides web developers with a way tighten the restrictions on framed content beyond what Content Security Policy (CSP) provides for unsandboxed cross-origin iframes. With the sandbox attribute, you can instruct the browser to load a specific frame's content in a low-privilege environment, starting with the least privilege possible and then whitelisting the necessary subset of capabilities. It is also very important to note, however, that the sandbox attribute takes away some privileges from the framed content that CANNOT be whitelisted "back in". For example, any framed page running in a sandbox absolutely cannot run native plugins (e.g. Flash, Silverlight, Java, etc.). This decision was made because native plugins run unmanaged code that the browser cannot offer any further security verifications on, and are frequently sourced from third parties.

iframe sandbox security csp cross-origin cross-domain xss html5