471,893 Members | 2,129 Online
Bytes | Software Development & Data Engineering Community
Post +

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 471,893 software developers and data experts.

is IE6 violating the same-origin policy?

I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!
Aug 27 '08 #1
2 1433
ja********@gmail.com wrote:
I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!
IE 6 does not have an XMLHttpRequest object, that was only introduced in
IE 7.
If you are talking about new ActiveXObject('Msxml2.XMLHTTP'), whether
that can make requests to different domains can be configured for each
security zone that IE has. I think with Windows XP SP 2 the default
setting for the internet zone is that such requests are not possible.
The settings for the intranet zone might be different.

--

Martin Honnen
http://JavaScript.FAQTs.com/
Aug 27 '08 #2
On Aug 27, 9:49 am, Martin Honnen <mahotr...@yahoo.dewrote:
jackcha...@gmail.com wrote:
I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!

IE 6 does not have an XMLHttpRequest object, that was only introduced in
IE 7.
If you are talking about new ActiveXObject('Msxml2.XMLHTTP'), whether
that can make requests to different domains can be configured for each
security zone that IE has. I think with Windows XP SP 2 the default
setting for the internet zone is that such requests are not possible.
The settings for the intranet zone might be different.

--

Martin Honnen
http://JavaScript.FAQTs.com/
Thank you Martin! Yeah, you are right about
ActiveXObject('Msxml2.XMLHTTP'). For requests to different domains, I
enable the access to different domain for internet and I guess that is
why in IE6 the page A is able to get data from the page B in different
domain. But I still wondering why page A from local disk is able to
get data from page B in another domain.
Aug 27 '08 #3

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

195 posts views Thread by Torbjørn Pettersen | last post: by
3 posts views Thread by ilovemyview | last post: by
7 posts views Thread by Sharon | last post: by
5 posts views Thread by Frederick Gotham | last post: by
15 posts views Thread by Frederick Gotham | last post: by
12 posts views Thread by KIRAN | last post: by
28 posts views Thread by SzH | last post: by
reply views Thread by YellowAndGreen | last post: by

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.