RE: [Rails-spinoffs] Cross Domain Ajax Request

Doug Ly Thu, 17 Aug 2006 12:30:21 -0700

Yes sir, it works like a charm for me. AFAIK J, XMLHttpRequest won’t allow you to execute _javascript_ located on a different domain. But hell yeah, it’s possible to make across domain request buddies.

Here is the code snippet I used

changeContent = function(req)

{

new Ajax.Request('http://www.google.com/search?hl=en&q=Doug+ly&btnG=Google+Search', {onSuccess:function(e)

{

alert(e.responseText);

} ,

onFailure: function(e)

{

debugger;

alert(e.statusText);

method : 'get'

}

);

}

</script>

…

After the request is done, alert pops up with the responseText.

If you guys want to know more about this cross domain scripting issue, please visit my blog to view my experience.

http://frontier05.blogspot.com/2006/04/remote-scripting-on-googles-blogspot.html

--Doug

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hill, Greg
Sent: Thursday, August 17, 2006 1:48 PM
To: rails-spinoffs@lists.rubyonrails.org
Subject: RE: [Rails-spinoffs] Cross Domain Ajax Request

I’d love to see your code snippet that does that ‘cause AFAIK it’s technically impossible in any browser on the market.

Greg

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug Ly
Sent: Thursday, August 17, 2006 12:34 PM
To: rails-spinoffs@lists.rubyonrails.org
Subject: [Rails-spinoffs] Cross Domain Ajax Request

This is extracted from an article by Brett McLaughlin about AJAX

------------------------------------------------

Welcome to the sandbox

Ajax has a sandbox security model. As a result, your Ajax code (and specifically, the XMLHttpRequest object) can only make requests to the same domain on which it's running. You'll learn lots more about security and Ajax in an upcoming article, but for now realize that code running on your local machine can only make requests to server-side scripts on your local machine. If you have Ajax code running on www.breakneckpizza.com, it must make requests to scripts that run on www.breakneckpizza.com.

-----------------------------------------------

I don’t agree with his point:

I can make an ajax request to Google for example from my own domain and get the search result response back without any error. So does that article make any sense to you when it says “…can only make requests to the same domain on which it's running.”?

Thank you experts.

--Doug

smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Rails-spinoffs mailing list
Rails-spinoffs@lists.rubyonrails.org
http://lists.rubyonrails.org/mailman/listinfo/rails-spinoffs

RE: [Rails-spinoffs] Cross Domain Ajax Request

Reply via email to