XML.com: Fixing AJAX: XMLHttpRequest Considered Harmful - The Diigo Meta page

• 28 Sep 11
  

  Isidro Vila Verde

  ajax xmlhttprequest javascript programming

• 28 Jul 10
  

  F. F.

  security browser ajax

• 18 Sep 09
  

  Bruno Ferreira

  xmlhttprequest security development

  • are ones that access
  • That restriction is that you aren't allowed to make XMLHttpRequests to any server except the server where your web page came from.
• 11 Sep 08
  

  alfred westerveld

  xmlhttprequest xml ajax security web webdev javascript

• 23 Mar 08
  

  gabriele Domenichini

  ajax javascript web xhtml xml xmlhttprequest

• 27 Nov 07
  

  Neil Saunders

  ajax xmlhttprequest xml programming crossdomain

• 11 Aug 07
  

  Mats Svensson

  UsefulForProject XML XSLT ajax programming webdev

• 17 Mar 07
  

  rg443322
• 15 Mar 07
  

  Dick Tang

  docs apps programming html javascript

• 26 Nov 06
  

  Matti Narkia

  ajax javascript programming xmlhttprequest security xml web cross-domain web_development crossdomain webdesign webdev howto tutorial tutorials tricks article development tips popular

• 20 Jul 06
  

  Jon Phipps

  ajax code javascript php programming webdesign webdev xml xmlhttprequest

• 13 Mar 06
  

  dan loaiza

  ajax programming

• 20 Feb 06
  

  mmankin

  ajax xmlhttprequest xml web2.0 javascript Programming reference

• 23 Jan 06
  

  gstathis

  ajax security xml xmlhttprequest programming javascript web2.0 article

• 18 Jan 06
  

  Eric Davis

  Bookmarks ajax security xml

• 01 Jan 06
  

  afonsofn

  ajax security javascript readlater imported-delicious

• 20 Dec 05
  

  Andy Brudtkuhl

  fixes issues with inter domain communication using ajax

  ajax howto

• 16 Dec 05
  

  Alex Kapranoff

  imported_yahoo Uncategorized ajax javascript xmlhttprequest security programming xml web

• 30 Nov 05
  

  Bernard Farrell

  How to get around the security restrictions of XmlHttpRequest

  ajax xmlhttprequest javascript programming security tutorial web2.0 xml

• 21 Nov 05
  

  Thomas Vander Wal

  ajax proxy security webdev development application web interaction xmlhttprequest api webservices xhtml scripting

• 15 Nov 05
  

  robert179

  Ajax

• 14 Nov 05
  

  auxonne auxonne

  ajax howto security article

• 12 Nov 05
  

  Liang Bin Hsueh

  happydesigner javascript ajax security

• 

  Richard Akerman
  • AJAX applications wouldn't be possible (or, at least, wouldn't be nearly as cool) without the XMLHttpRequest object that lets your JavaScript application make GET, POST, and other types of HTTP requests from within the confines of a web browser. All of the most interesting AJAX applications that have appeared in the past couple of years use the XMLHttpRequest object extensively to give users a responsive in-browser experience without the messiness of traditional HTML forms posting.  But the kind of AJAX examples that you don't see very often (are there any?) are ones that access third-party web services, such as those from Amazon, Yahoo, Google, and eBay. That's because all the newest web browsers impose a significant security restriction on the use of XMLHttpRequest. That restriction is that you aren't allowed to make XMLHttpRequests to any server except the server where your web page came from. So, if your AJAX application is in the page http://www.yourserver.com/junk.html, then any XMLHttpRequest that comes from that page can only make a request to a web service using the domain www.yourserver.com. Too bad -- your application is on www.yourserver.com, but their web service is on webservices.amazon.com (for Amazon). The XMLHttpRequest will either fail or pop up warnings, depending on the browser you're using.
• 11 Nov 05
  

  clementi1832

  ajax development javascript programming scripting security webdev xml toread

• 

  rickduarte1980

  ajax javascript web webservices xml http

• 

  hustwj

  ajax

• 

  Chrys R

  ajax

• 

  Eric Blue

  ajax

• 10 Nov 05
  

  newuni voljet

  mejoras XMLHttpRequest

  ajax

• 

  jraggio

  ajax

• 

  danrochman

  Working around XMLHttpRequest security restrictions.

  WebDev AJAX from_delicious

• 

  Bob Cunningham

  ajax oreilly howto webdev xml

• 

  César Córcoles

  webdev ajax

• 

  Asteris Masouras

  ajax oreilly

Page Comments

• 
  Bernard Farrell on 2006-08-04
  How to get around the security restrictions of XmlHttpRequest

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.