Abstract: An approach is provided for providing secure cross-site scripting. A web services platform causes, at least in part, reception of an initiation request from at least a first inline frame of at least one web page. The initiation request specifies a developer identifier associated with a domain of the at least one web page. The web services platform determines a callback resource identifier based on the developer identifier. The web services platform then determines to cause, at least in part, transmission of the callback resource identifier to the at least the first inline frame for use in creation of at least a second inline frame associated with the at least the first inline frame.

Abstract: A portable apparatus comprising input means arranged to receive user input comprising of one or more taps on the portable apparatus. The apparatus is able to detect the taps on the portable apparatus and to determine at least one location of the taps on the portable apparatus. The apparatus is further able to define an imaginary key on the apparatus on the determined location.