javascript includes and browser security

[jdoggz316]

Does anyone know anything about what browser security settings will do to cross domain references in javascript includes?

Basically - i'm trying to include dynamic asp content on a linux apache server -

So - if i'm viewing a webpage on www.domain1.com

and it has the following include:

<script language="javascript" src="http://www.domain2.com/file.asp">

Are there any security implications? Would it alternatively be better to create a subdomain sub.domain1.com which points to the IP address of www.domain2.com?

Thanks!

[Iguana]

I've not tried this but I see no reason why it wouldn't work. After all the javascript would actually run in the context of your domain1 page