No you cannot, that would be heaven for phishing sites. (maybe its implemented in IE then?)

As for the second question. You could use php's file() to get the xml file, but other than that I don't know what you could do.