One requirement for a site I'm working on calls for visitors to be able to sign up for an email list. Rather than add server-side handling for this otherwise static site, I would like to POST from the email signup form to another server (owned by the same client) that already has an email signup handler on it.
But that server is on a different domain, so I expect some resistance from UA CSRF protections, but I don't know exactly what to expect. (There is practically no JS involved with this, just cross-site POSTing.)
- Is what I want to do possible at all, or do I need to iframe the email signup form from server #2?
- If it is possible, what kind of problems can I expect to face, and how should I overcome them?