Use a Web Proxy for Cross-Domain XMLHttpRequest Calls - Yahoo! Developer Network - The Diigo Meta page

• 03 Sep 13
  

  jpbarbosa

  javascript ajax

• 17 Jan 13
  

  張 旭

  ajax javascript proxy xml json security web php curl yahoo

  • writing client web applications that use this object  can be tricky given restrictions imposed by web browsers on network  connections across domains
  • a web proxy that relays network requests from your web server to services
  • All modern web browsers impose a security restriction on network connections,  which includes calls to XMLHttpRequest
  • If both your web  application and the XML data that application uses come directly from the same  server, then you do not run into this restriction.
  • the browser prevents the connection from being opened at all.
  • Bummer
  • There are a number of solutions to this problem
  • Instead of making your XMLHttpRequest calls directly to the web service, you make your calls to your web server proxy
  • The proxy then passes the call onto the web service and in return passes the data back to your client application
  • An open proxy that passes on connections to  any web site URL is open to abuse
  • Use apache's mod_rewrite or mod_proxy to pass requests from your server to some other server

  9 more annotations...

• 28 Dec 12
  

  David Bovill

  mashup javascript proxy jsonp cors

• 31 Oct 12
  

  Ricardo Olvera

  thales map

• 29 Oct 12
  

  Siew Joon Tai

  proxy

• 16 Aug 12
  

  Matthew Newton

  ifttt pinboard Unread

• 04 Jan 12
  

  Rajeev Jha

  yahoo cross domain proxy

• 29 Nov 11
  

  yigaler techyig

  INTERNETmentation PROXY Theory DOCUMENTATION

• 28 Nov 11
  

  ajax crossdomain

• 29 Oct 11
  

  Bruno Ferreira

  xmlhttprequest

• 07 Oct 11
  

  emre tan

  php_proxy

• 07 Sep 11
  

  Jennifer Culp

  ajax xml javascript php crossdomain proxy

• 25 Aug 11
  

  benjaminbojko

  javascript crossdomain

• 21 Jul 11
  

  Yrgl

  javascript ajax crossdomain

• 17 Jul 11
  

  digitalrinaldo

  XMLHttpRequest

  XMLHttpRequest crossdomain

• 20 Apr 11
  

  Laurentiu Ilie

  ajax proxy

• 06 Apr 11
  

  naim kazi
• 22 Feb 11
  

  mgraber

  "JavaScript: Use a Web Proxy for Cross-Domain XMLHttpRequest Calls"

  javascript ajax security crossdomain

• 22 Dec 10
  

  jhave2

  js javascript

• 14 Dec 10
  

  natxo cabre

  ajax javascript proxy xmlhttprequest yahoo web php jsonp json crossdomain

• 16 Nov 10
  

  Zhi Min Choo

  ajax crossdomain development howto http java xhttp xmlhttprequest proxy domain cross-domain cross web2.0 web yahoo webdev webservices xml security tips reference programming json javascript php tutorial apache mtech

• 09 Nov 10
  

  Chris Burbridge

  javascript proxy delicious

• 20 Oct 10
  

  Ethan Gardner

  proxy sameorigin ajax javascript security webdev del.icio.us

• 25 Sep 10
  

  mrengy

  webdevelopment Ajax addventures

• 12 Aug 10
  

  Christ McDaniel
• 11 Aug 10
  

  Perttu Piirto

  ajax javascript proxy yahoo programming web php xmlhttprequest

• 08 Jul 10
  

  davidmerrick
• 30 Jun 10
  

  techyi

  xmlhttprequest cross-domain webservices yahoo php

• 27 May 10
  

  sanjayuttam

  jsonp javascript ajax proxy

• 15 May 10
  

  bulk mail

  crossdomain xmlhttprequest delicious

• 07 May 10
  

  shaoshuai0102

  javascript 跨域 ajax

• 03 Feb 10
  

  ajax javascript howto

• 18 Nov 09
  

  yahoo gmarks

• 08 Nov 09
  

  Yi Wang

  Proxy XSS Yahoo

  • Use apache's mod_rewrite or mod_proxy to pass requests from your server to some other server.
  • no other browsers support script signing at this time, so this solution is of limited use.
• 30 Oct 09
  

  Scott Hendrickson

  javascript ajax proxy php

• 28 Oct 09
  

  Gregory Gilelach

  javascript web ajax proxy xmlhttprequest

• 13 Oct 09
  

  Quang Van

  xss xmlhttprequest cross-domain crossdomain cross domain fromdelicious

• 14 Sep 09
  

  steve casey

  proxy JavaScript AJAX crossdomain security webservices xmlhttprequest

• 11 Aug 09
  

  ed talmadge

  Proxy

• 16 Jul 09
  

  amit papnai

  ajax webdev

• 04 Jun 09
  

  ivernaloo

  javascript

• 

  mpazaryna
• 15 May 09
  

  wonglh

  ajax

• 08 Feb 09
  

  dtygel
• 06 Nov 08
  

  Steve Wilde

  JavaScript Developer Center :

  yahoo webservices webdev web2.0 web tutorial tips reference xhr xml xmlhttprequest yui tt280

• 23 Oct 08
  

  - -

  javascript yui http proxy webdev

• 03 Oct 08
  

  maciek maciek

  ajax proxy

• 15 Sep 08
  

  Kevin Champion

  http://localhost/php_proxy_simple.php?yws_path=

  javascript php

• 14 Sep 08
  

  arnold reuser

  mashupserver

• 03 Sep 08
  

  Ian McGregor

  ajax php

• 29 Aug 08
  

  jessehubj

  ajax cross-domain

• 10 Jun 08
  

  Frank Lin

  The solution to resolve the Javascript issue regarding cross-domain calls

  Javascript

• 06 May 08
  

  Greg Bartnick

  ajax crossdomain proxy javascript

  • Other Solutions

      

    In addition to using a web proxy to pass web services data to your application, there are several other options to working around cross-domain browser restrictions: 

     
     
    • Use apache's mod_rewrite or mod_proxy to pass requests from your server to some other server. In your client code you just make the request as if it was actually on your server -- no browser problems with that. Apache then does its magic and makes the request to the other server for you.
     
    • Use JSON and dynamic <script> tags instead of XML and XMLHttpRequest.  You can get around the browser security problem altogether by making your web  services request directly inside a <script> tag. If the Yahoo!  Web Service you're using can output JSON (using the output=json and callback=function  parameters), the data you get back from the web service is evaluated as a JavaScript  object when the page is loaded. See our JSON Documentation for an example of  how to do this in your own scripts.
     
    • Digitally sign your scripts. In Firefox you can apply a digital signature to your script and those scripts will then be considered "trusted" by the browser. Firefox will then let you make XMLHttpRequests to any domain. However, no other browsers support script signing at this time, so this solution is of limited use.
• 01 May 08
  

  Simon Gregory

  proxy programming xmlhttprequest yahoo javascript

• 29 Apr 08
  

  Jason Sears

  ajax javascript programming web web2.0

• 11 Apr 08
  

  alfred westerveld

  php proxy javascript ajax crossdomain

• 04 Apr 08
  

  jason clark

  ajax javascript php presentation web-services

• 02 Apr 08
  

  javascript

• 31 Mar 08
  

  Carl Moore

  MyStuff

• 28 Mar 08
  

  Manolis Viennas

  javascript cross_domain articles(useful) proxy ajax delicious

• 13 Mar 08
  

  alimanfoo

• 28 Feb 08
  

  mozvip mozvip

  proxy ajax

• 15 Feb 08
  

  Peter Zingg

  ajax scripting javascript json proxy webservices delicious

• 09 Jan 08
  

  caiwenyu
  • e a security restriction
  • er will allow cross
• 02 Jan 08
  

  Alexey Popukailo

  ajax javascript php web dev

• 20 Dec 07
  

  Chad Burrus

  web-development for:freq47

• 09 Dec 07
  

  Joachim Kliemann

  yahoo hmmh proxy ajax

• 27 Nov 07
  

  Michel Auger

  xmlhttprequest ajax javascript

• 18 Nov 07
  

  nicolas feray

  ther by making your web services request directly inside a <script> tag. If the Yahoo! Web Service you'r

  javascript ajax cross-domain

• 20 Oct 07
  

  Simon Brüchner

  ajax proxy javascript xmlhttprequest yahoo delicious import

• 27 Sep 07
  

  javascript

• 20 Sep 07
  

  Rama G

  xss proxy crossdomain

• 23 Aug 07
  

  Andrew White

  _imported ajax

• 09 Aug 07
  

  Mats Svensson

  AJAX Useful UsefulForProject programming webdev

• 18 Jun 07
  

  wuduoyi

  cross-domain Ajax

• 02 Jun 07
  

  Marek Rozanski

  ajax development howto javascript security tutorial yahoo xmlhttprequest webdev _from_delicious

• 10 May 07
  

  ellecer

  ajax javascript

• 15 Mar 07
  

  Dick Tang

  docs apps programming html javascript

• 21 Feb 07
  

  Ikerne Jauregui

  All modern web browsers impose a security restriction on network connections, which includes calls to XMLHttpRequest. This restriction prevents a script or application from making a connection to any web server other than the one the web page originally c

  ajax

• 13 Feb 07
  

  lgsiigo

  crossdomain ajax proxy @yahoo

• 09 Nov 06
  

  Arron Schaar

  javascript ajax proxy tips

• 22 Oct 06
  

  Mike Koss

  web services javascript

• 26 Sep 06
  

  dan loaiza

  howto reference xml http

• 07 Aug 06
  

  Alex Han

  HOWTO: Use a Web Proxy for Cross-Domain XMLHttpRequest Calls

  ajax

• 12 Jul 06
  

  brettjforsyth
• 20 Jun 06
  

  Jamie Folsom

  javascript proxy xhr yahoo web service delicious

• 09 May 06
  

  mallipeddi

  ajax java

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.