Connecting Tech Pros Worldwide Help | Site Map

is IE6 violating the same-origin policy?

 
LinkBack Thread Tools Search this Thread
  #1  
Old August 27th, 2008, 04:45 PM
jackchang1@gmail.com
Guest
 
Posts: n/a
Default is IE6 violating the same-origin policy?

I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!

  #2  
Old August 27th, 2008, 04:55 PM
Martin Honnen
Guest
 
Posts: n/a
Default Re: is IE6 violating the same-origin policy?

jackchang1@gmail.com wrote:
Quote:
I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!
IE 6 does not have an XMLHttpRequest object, that was only introduced in
IE 7.
If you are talking about new ActiveXObject('Msxml2.XMLHTTP'), whether
that can make requests to different domains can be configured for each
security zone that IE has. I think with Windows XP SP 2 the default
setting for the internet zone is that such requests are not possible.
The settings for the intranet zone might be different.

--

Martin Honnen
http://JavaScript.FAQTs.com/
  #3  
Old August 27th, 2008, 05:25 PM
jackchang1@gmail.com
Guest
 
Posts: n/a
Default Re: is IE6 violating the same-origin policy?

On Aug 27, 9:49 am, Martin Honnen <mahotr...@yahoo.dewrote:
Quote:
jackcha...@gmail.com wrote:
Quote:
I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!
>
IE 6 does not have an XMLHttpRequest object, that was only introduced in
IE 7.
If you are talking about new ActiveXObject('Msxml2.XMLHTTP'), whether
that can make requests to different domains can be configured for each
security zone that IE has. I think with Windows XP SP 2 the default
setting for the internet zone is that such requests are not possible.
The settings for the intranet zone might be different.
>
--
>
Martin Honnen
http://JavaScript.FAQTs.com/
Thank you Martin! Yeah, you are right about
ActiveXObject('Msxml2.XMLHTTP'). For requests to different domains, I
enable the access to different domain for internet and I guess that is
why in IE6 the page A is able to get data from the page B in different
domain. But I still wondering why page A from local disk is able to
get data from page B in another domain.
 

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Popular Articles

What is Bytes?

We are a network of experts and professionals in IT and software development that help one another with answers to tough questions and share insights. Get the best answers to your questions from over 220,989 network members.