I'm all set to build a killer app to improve a locked down SaaS product

Edit Subject

Hello Jacob,

You *do not* need to verify your domain in order to make cross domain requests.

You can do a GET and POST requests very simply with our API using the appAPI.request method.

Read how exactly to do it here:
https://crossrider.wiki.zoho.com/Cros...

Just to make clear what verify domain is all about: You need to verify domain if you want to access the extension (appAPI) from your website's JS code.

This way you can know if the user has the extension installed, and if he does, then you can access the appAPI object from the webpage and get access to its methods, such as: the extension database, cross domain ajax and basically everything you can do with the appAPI.

Let me know if you need any more information re this and good luck with your killer app :)

Ah cool. Thank you, this is good to know, and it does work :) So to be clear, I can still access the contents of the window and modify the page that the user is seeing right? I just can't run JS on that page targeted for my app?

How do I access the dom of the page I'm viewing?

You can freely access the DOM of the current viewed page. You can do it just like when using regular JS and/or jQuery ($jquery in our case) by using the document object or jQuery selectors, etc.

Your Page Code will run on every page the user visits and can access the DOM, while the page can not acces the extension. This is why we have the verified domain - so only you as the developer, can access your users' extension from your own website.