From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <eklhad@comcast.net>
Received: from resqmta-ch2-10v.sys.comcast.net
 (resqmta-ch2-10v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:42])
 by hurricane.the-brannons.com (Postfix) with ESMTPS id B580079E0D
 for <edbrowse-dev@lists.the-brannons.com>;
 Tue, 27 Dec 2016 08:12:28 -0800 (PST)
Received: from resomta-ch2-19v.sys.comcast.net ([69.252.207.115])
 by resqmta-ch2-10v.sys.comcast.net with SMTP
 id LuM6cbzRYrC25LuMtcvRj1; Tue, 27 Dec 2016 16:12:51 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net;
 s=q20161114; t=1482855171;
 bh=pl2uk8DzpXBYtqkpgNiGiS4PtPPnvHUIbNzDKHjD03Y=;
 h=Received:Received:To:From:Reply-to:Subject:Date:Message-ID:
 Mime-Version:Content-Type;
 b=DUnseyj44jt3yg252336lquvLKmLZ3g7M1JT6+uEgsEnUv/AOsntbsj6SkQnOpqyG
 khguDSIAUdRZq0ifNwOcy1CMyMaD8XtYnyNKzYYby0yp0CnVLHSQ8dEs0QbWKVK0d8
 o36/KA+GHvj7o45WP+hCF97vz5xzzASc1Ka4zh0c0n0E2jZaUtva+B/1BBHhyHJVdI
 3SNvcQAxyRhZlhpsonQt9I/gzlc0DV3aulQYiQBq6oq8bXOfYqXgmFeaNkFKmpWJCC
 rK3Sin6gHWSdYJ98EgBrL6yuJ/SPW4/r5TcyxylJnPWEBV1RmR30Qz3KQ9RvYnX6jC
 EEH4fCC7O4JXg==
Received: from unknown ([IPv6:2601:408:c301:784d:21e:4fff:fec2:a0f1])
 by resomta-ch2-19v.sys.comcast.net with SMTP
 id LuMtcpso2JrRELuMtc2fXK; Tue, 27 Dec 2016 16:12:51 +0000
To: Edbrowse-dev@lists.the-brannons.com
From: Karl Dahlke <eklhad@comcast.net>
Reply-to: Karl Dahlke <eklhad@comcast.net>
User-Agent: edbrowse/3.6.2+
Date: Tue, 27 Dec 2016 11:12:51 -0500
Message-ID: <20161127111251.eklhad@comcast.net>
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-CMAE-Envelope: MS4wfNJrjZcmTNFsv7vBQxtVSfDz0fLeIt2bAfizAP+n7/Jvg1wBDRyO+DCa9fkq5sBKIj21iDRvPBy3IshhnctR1rpe3Fy6DqwNOQXOpN5DhJJkmGNAejhv
 7v/QM1gp3Pt9NNnww9v/8PVWpnChmdPEoMtzNJ/ghZerl3LUBnB3Wkua
Subject: [Edbrowse-dev] XMLHttpRequest
X-BeenThere: edbrowse-dev@lists.the-brannons.com
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Edbrowse Development List <edbrowse-dev.lists.the-brannons.com>
List-Unsubscribe: <http://lists.the-brannons.com/mailman/options/edbrowse-dev>, 
 <mailto:edbrowse-dev-request@lists.the-brannons.com?subject=unsubscribe>
List-Archive: <http://lists.the-brannons.com/mailman/private/edbrowse-dev/>
List-Post: <mailto:edbrowse-dev@lists.the-brannons.com>
List-Help: <mailto:edbrowse-dev-request@lists.the-brannons.com?subject=help>
List-Subscribe: <http://lists.the-brannons.com/mailman/listinfo/edbrowse-dev>, 
 <mailto:edbrowse-dev-request@lists.the-brannons.com?subject=subscribe>
X-List-Received-Date: Tue, 27 Dec 2016 16:12:28 -0000

Since almost the dawn of html, <frame> and <iframe> can cause a browser
to fetch other html, perhaps from another domain, and paste the result into the web page.
In this regard edbrowse is more manual than any other browser; you have to click on a link to fetch in the frame.
Not saying I like it that way, I don't, it was just easier at the time.
Anyways other browsers just do it, without worrying about security,
I don't think XMLHttpRequest is any different; except js is directing the http fetch,
and perhaps using the result in some computational way,
rather than html directing the fetch and browsing the result.
Most of the time even js just slaps the html into a <div> where it is browsed;
just a damn fancy complicated, and dynamic, form of iframe.
I'd be surprised if a js fetch had to draw from the same domain, but it might, IDK.
Maybe write some test code and run it on other browsers.

By the way, we should think about expanding all these frames and iframes, as other browsers do,
but it's more work than first appears.
The top half of your "buffer" is this tree from this html on this domain running this instance of js,
and the bottom half of your buffer is that tree from that html on that domain running that instance of js,
so multiple js windows tied to one edbrowse window, which we can't do now, etc etc.
definitely some work there; for now an improved dom and jquery is more important.

Karl Dahlke