On Wed, Mar 16, 2016 at 11:31 PM, Nova Tan <[email protected]> wrote:
> Thanks Kevin, is there any work around if I don't have control of the > content? > Sorry, no. If you're adventurous enough to look into improving the relevant Caja subsystems to support things like this (or fix the bug, whichever it turns out to be), then I'd be happy to point to the relevant parts of the code. One other question related to this is if the returned javascript tries to > invoke an http request using XMLHttpRequest#send, you would get: > Uncaught script error: Uncaught NetworkError: Failed to execute 'send' on > 'XMLHttpRequest'. Is this intended behavior to prevent unwanted ajax > requests? > That sounds like a browser-generated error, but it *could* be due to something Caja is doing. XHR is allowed in general, but requests are subject to the URI policy, so make sure that the uriPolicy you provide allows the URL in question. -- --- You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
