Ajax component

I have created simple ajax component using javascript. When i use same code in .html file outside LiveSite it works , whereas inside LiveSite it gives me access denied.

I thought that its maybe because of cross domain but same is happening for www.google.com. I am attaching both .component and .html files.

Find more posts tagged with

Comments

miroperez

I'm not sure what you mean by outside of LiveSite it works. You can't directly make an ajax call to another domain.

Amanpreet

By outside LiveSite i mean ,code in html file.
Code is working fine from html file , whereas in its not working in .component. I am able to make ajax call to google from htm file.

miroperez

If you are using IE to test you probably have your security settings to allow cross domain datasources which is probably why it's working in IE or you might be serving from file:// in which case I think security might get ignored for IE.

Look at your security settings in IE. I'm guessing they are at different levels for the two tests.

Look at the ajaxrequest.js included with livesite or look at many of the other publicly available ones like jquery or ext js core so you don't have to hand roll something that's already been done with all the caveats.

You should NOT rely on someone having to set their browser security settings to something special so your code can work not to mention the security ramifications of XXS. If you need to access a thirdparty site it's usually for some api driven data that probably has a jsonp return type so you can do cross domain scripting. Google jsonp.

Snap 2014-04-16 at 11.34.27.png