HTA xss weird behaviour

ServGator

New Member
I have chosen HTA to make a small website because it allegedly ignores the Same Origin Policy. To test this I have written a small test site with these 4 iframes:iframe id="google" src="http://www.google.nl" application="yes">
iframe id="test" src="http://stackoverflow.com/questions/15500213/test.html">
iframe id="test2" src="http://stackoverflow.com/questions/15500213/C:/test.html">
iframe id="test3" src="http://stackoverflow.com/questions/15500213/D:/test/test.html">
The content is accuratly displayed for all four iframes. However when I use JS to get the body of the iframes, I run into a weird problem:$(document).ready(function() {

alert($("#google").contents().find("body").html());
alert($("#test").contents().find("body").html());
alert($("#test2").contents().find("body").html());
alert($("#test3").contents().find("body").html());
});
The alert for all test id-s works as it's supposed to. The one for #google however, returns undefined.The main file i'm running the HTA from is in C:/some/directory/deep/in/test.htaWhat am I doing wrong?
 
Back
Top