0

I want to help users change privacy settings in a third party web application.

My first thought was loading the web application in an iframe and interacting with it via JavaScript. But the same-origin policy would prohibit that.

To avoid the same-origin restriction I could use a web proxy, but I doubt many users would trust logging in.

I could build a browser extension, but that makes it more cumbersome to use and harder to support all browsers.

Any suggestions?

hoju
  • 28,392
  • 37
  • 134
  • 178
  • 2
    If you need your users to change their security settings to use your site you may be doing something the wrong way. What exactly are you trying to accomplish? – ilivewithian May 10 '12 at 15:26
  • @ilivewithian It sounds like a third party thing to change settings for a web app, not his own web app. – Snuffleupagus May 10 '12 at 15:28
  • Even if it is 3rd party, messing with security settings is a big barrier to entry. My question stands. – ilivewithian May 10 '12 at 15:30
  • @ilivewithian Well he can't exactly rewrite a web application he doesn't have control over, hence the point of making an app to do it... – Snuffleupagus May 10 '12 at 15:32
  • yes exactly - trying to help people fix their privacy settings for an external social networking website. – hoju May 11 '12 at 01:49
  • Well, it's Firefox/Chrome only and requires an extension installed, but you can make a GreaseMonkey script... – Elias Dorneles Feb 09 '13 at 16:55

1 Answers1

0

You can use OAuth redirect mechanism to support your use case.

Artem Oboturov
  • 4,344
  • 2
  • 30
  • 48