如何让我的网站在新的window中打开另一个网站，然后填写forms并在新的window中提交（不能查询参数）？

Question

Here we have following website: https://aspen.eccouncil.org/VerifyEval

A website should have a link, which opens that URL in a new window, then fills out the "Candidate Name" and "Certificate Number" fields on that page, then finally submits it, so the user sees the verification directly (without having to type those parameters manually).

I tried to use the window.open() function with javascript for the both mentioned websites, and then accessing the document property of the created object. But it failed (even if I put the new window to the focus), Chrome not worked at all, Firefox gave:

Error: Permission denied to access property "document"

What is the way to do that?

Answer 1

Modern browsers won't allow you to execute code on different domains. The reason is simple - if it can be done, a malicious attacker could use this approach to lure you click on a link and then execute code on this page with your permissions (for example: execute code on your bank website). Moreover, the site you trying to execute code on should protect itself from receiving such forms submissions - it's called Cross-Origin Resource Sharing (CORS) protection.