same-origin-policy

Getting around same origin policy in javascript without server side scripts...

I have an environment that doesn't allow server side scripting really (it is extremely difficult to get a script "installed" on the server). I tried using an iframe to violate javascript's same origin poilcy; however, that didn't work. Are there any other workarounds I am not aware of? Thanks! ...

"Same origin policy" and scripts loaded from google - a vulnerable solution?

I read the question here in SO "jQuery Linking vs. Download" and I somehow don't get it. What happens if you host a page on http://yourserver.com, but load jQuery library from http://ajax.googleapis.com and then use the functions defined in jQuery script? Does "same origin policy" not count in this case? I mean, can you make AJAX calls...

Using Prototype to load a JavaScript file from another domain

Using Prototype, anyone know how to load a javascript file using Ajax.Request from another domain? Or if this is possible? I believe this is possible with jquery, digg do it to load the Facebook API: jQuery.ajax({type:"GET", url:"http://static.ak.facebook.com/js/api_lib/v0.4/FeatureLoader.js.php", cache:true, dataType:"script"}); Sou...

S3 browser upload via POST: unable to handle errors gracefully

I am writing an app where I want the customer to be able to upload to Amazon S3 straight from the browser. I can make this work just fine. But when errors occur, I want to handle them more gracefully than splattering an XML document on the customer's screen. I have a scheme that I think would work, but it's failing. Here's what I'm t...

Same origin policy javascript

Hi, I'm writing an NPAPI plugin that injects a script with a src located at my server. After the injection, my plugin tries to call a function in the script. But this doesnt seem to work. I think the reason is the same origin policy, but im not sure how to overcome it. The call to the function works if i inject the script code complete...

GWT Request Builder problem (same site policy issue?)

I am trying out GWT in this 'configuration': 1) I have written a server backend in python which will produce json output (running at localhot:8094) 2) I have written a very simple GWT app that will use RequestBuilder to set GET to the python server (in development mode of the GWT eclipse plugin, it is accessible via http://127.0.0.1:88...

Data mining from iframes

I am interested in developing some javascript that resides as browser bookmark that can mine data from nested iframes and AJAX the data back to a remote server. A small collection such scripts would be used to coordinate player stats and attack strategy for a popular online game. I am a novice javascript programmer and don't know if th...

Same-origin policy workaround using document.domain in Javascript

I am running into same-origin policy issues in Javascript. I've read about a workaround for this using the document.domain variable, but I cannot get the workaround to work. The workaround is that you are supposed to be able to set document.domain to 'example.com' so that if you run code from foo.example.com it can load data via XHR fr...

Firefox Cross Domain Request

I need to make a cross domain request from a script that runs in firefox (it's just for development purposes). Can this be achieved? maybe modifying the about:config keys? Thanks! ...

Disable the Same Origin Policy / making cross domain XMLHttpRequests in WebKit WebViews?

I would like to disable the same origin policy on XMLHttpRequests in my own embedded WebViews. I have control over the pages loaded / code being executed in the WebView, so I do not care about enforcing the same origin policy. I would like to make cross-domain requests. I've tried implementing the WebPolicyDelegate and WebResourceLoadDe...

Load external style sheets on request from a different origin

Hi, Is there a plugin or feature in jQuery that enables the dynamic loading of stylesheets from different origins similar to $.getJSON() or $.getScript()? I am able to dynamically integrate a style sheet from the same origin, but I need to be able to dynamically inject a jQuery UI theme from a different origin into a page. I guess I can...

Jquery .load Same origin policy

Is there anyway i can fool the Jquery .load Same origin policy? The closest i've come is with this tut. But that only deals with rss feeds. ...

JavaScript Same Origin Policy - How does it apply to different subdomains?

How does the Same Origin Policy apply to the following two domains? http://server1.MyDomain.com http://server2.MyDomain.com Can I run JS on a page hosted on server1, if the content is retreived from server2? edit according to Daniel's answer below, I can include scripts between different subdomains using the <script> tag, but what ab...

Cross-domain templating with Javascript

I'm currently building a Javascript library that can be used to easily create embeddable media based on the URL of a media file, and then be controlled using Javascript methods and events (think something like the Flash / Silverlight JW player). Of course, i could simply cat all the html tags from the Javascript library and send that t...

JavaScript to detect if the parent frame is of the same origin?

I'm looking for a cross-browser way to detect whether the parent frame is the same origin as my frame, preferably without printing warnings on the JavaScript error console. The following seems to work but I'd like to avoid printing errors to the console (at least Safari and Chrome do when accessing location.href on the parent frame. Fir...

Any hosted versions of jQuery that have the 'Access-Control-Allow-Origin: *' header set?

I have been working with jQuery recently and ran into a problem where I couldn't include it in a userscript because XmlHttpRequest uses the same origin policy. After further testing I found that most browsers also support the Cross-Origin Resource Sharing access control defined by W3C as a workaround for issues with same origin policy. I...

Google Web Toolkit Deferred Binding Issue

I developed a web app using GWT about 2 years ago, since then the application has evolved. In its current state it relies on fetching a single XML file and parsing the information from it. Overall this works great. A requirement of this app is that it needs to be able to be ran from the filesystem (file:///..) as well as the tradition...

Flash/Javascript upload in spite of same origin policy

Can one upload files to a domain other than the domain a script originates from? For example, suppose you're hosting files on www.example.com, and you want to upload files to uploads.example.com, would the following script violate the same origin policy (using uploadify): <!-- from http://www.example.com/upload.html --> <input id="file...

How does the same origin policy apply to IP addresses

I have a server on our company intranet that runs JBoss. I want to send API calls to this server from my machine, also on the intranet, and get the resulting XML responses using JQuery. I read the entry on Wikipedia but am confused how that applies to my situation, since our machines only have IP addresses, not domain names. I have ...

Simple application to aggregate information from multiple web services in fullscreen

Whats the easiest way to build a simple 'web' application which is a single page, that just refreshes itself (using AJAX or something) to display continuously changing data hosted on various different servers on the internet? I want to interface with (for example) Twitter, Facebook, Skype, Google Calendar, and any number of other servic...