Re: Browser restrictions on cross origin data access

2012-12-09 Thread Boris Zbarsky
On 12/8/12 6:04 PM, Jesper Kristensen wrote: My web application displays some sensitive information to a logged in user. The user visits another site without explicitly logging out of my site first. How do I ensure that the other site can not access the sensitive information without accept from m

Browser restrictions on cross origin data access

2012-12-09 Thread Jesper Kristensen
I have been trying to figure out what restriction browsers enforce for cross origin data access. I would like to find the answer to the following question: My web application displays some sensitive information to a logged in user. The user visits another site without explicitly logging out of