469,270 Members | 1,232 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,270 developers. It's quick & easy.

is IE6 violating the same-origin policy?

I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!
Aug 27 '08 #1
2 1394
ja********@gmail.com wrote:
I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!
IE 6 does not have an XMLHttpRequest object, that was only introduced in
IE 7.
If you are talking about new ActiveXObject('Msxml2.XMLHTTP'), whether
that can make requests to different domains can be configured for each
security zone that IE has. I think with Windows XP SP 2 the default
setting for the internet zone is that such requests are not possible.
The settings for the intranet zone might be different.

--

Martin Honnen
http://JavaScript.FAQTs.com/
Aug 27 '08 #2
On Aug 27, 9:49 am, Martin Honnen <mahotr...@yahoo.dewrote:
jackcha...@gmail.com wrote:
I had a web page hosted in one domain. In IE6 it is able to request
data from another page in a different domain using XMLHttpRequest
object. It fails in IE7/Firefox/Safari. Can you confirm that the
XMLHttpRequest object in IE6 violate the same-origin policy? I am not
sure if it was my error or IE6's fault. Thank you!

IE 6 does not have an XMLHttpRequest object, that was only introduced in
IE 7.
If you are talking about new ActiveXObject('Msxml2.XMLHTTP'), whether
that can make requests to different domains can be configured for each
security zone that IE has. I think with Windows XP SP 2 the default
setting for the internet zone is that such requests are not possible.
The settings for the intranet zone might be different.

--

Martin Honnen
http://JavaScript.FAQTs.com/
Thank you Martin! Yeah, you are right about
ActiveXObject('Msxml2.XMLHTTP'). For requests to different domains, I
enable the access to different domain for internet and I guess that is
why in IE6 the page A is able to get data from the page B in different
domain. But I still wondering why page A from local disk is able to
get data from page B in another domain.
Aug 27 '08 #3

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

195 posts views Thread by Torbjørn Pettersen | last post: by
3 posts views Thread by ilovemyview | last post: by
7 posts views Thread by Sharon | last post: by
5 posts views Thread by Frederick Gotham | last post: by
15 posts views Thread by Frederick Gotham | last post: by
12 posts views Thread by KIRAN | last post: by
28 posts views Thread by SzH | last post: by
1 post views Thread by CARIGAR | last post: by
reply views Thread by zhoujie | last post: by
reply views Thread by suresh191 | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.