Access is denied error on XDomainRequest

Question

I'm trying to use microsoft XDomainRequest to send cross domain request. Here is the code

...
if ($.browser.msie && window.XDomainRequest) {
  // Use Microsoft XDR
  var xdr = new XDomainRequest();
    xdr.open("POST", "http://graph.facebook.com/1524623057/");

  xdr.send();
} 
 ....

It gives SCRIPT5: Access is denied. error on xdr.open(...) line.

9, I have changed to 8 with developer tools, but the same result — narek.gevorgyan, Dec 12 '11 at 08:21
Yes, see point 4: http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-workarounds.aspx — i_am_jorf, Dec 12 '11 at 17:53
@jeffamaphone Do I understand the item #4 correctly? Only plain text? What if I want to get JSON formatted data or a XML structure? In practice, those CAN be transmitted as text, although technically speaking it's not "text" but "application/json" and "application/xml"... — Konrad Viltersten, Nov 07 '12 at 13:54

score 58 · Accepted Answer · edited Jun 20 '20 at 09:12

58

I found the reason of this problem. As stated in Point 7:

Requests must be targeted to the same scheme as the hosting page

This restriction means that if your AJAX page is at http://example.com, then your target URL must also begin with HTTP. Similarly, if your AJAX page is at https://example.com, then your target URL must also begin with HTTPS.

edited Jun 20 '20 at 09:12

Community

1
1

answered Dec 14 '11 at 18:46

narek.gevorgyan

3,957
5
29
50

2

Point 7 being "Requests must be targeted to the same scheme as the hosting page". I was struggling with this same problem too, calling an **https** address from an **http** page. Thanks for the link! – Kaivosukeltaja Aug 09 '12 at 10:43
2

I understood that, but is there any way to fix this problem and can access https: ajax from http sites. – jforjs Dec 11 '14 at 06:20
this really help me a lot! I spend hours trying to figure out :) – Kenneth Palaganas Apr 10 '15 at 17:31

score -1 · Answer 2 · answered Dec 11 '11 at 13:25

-1

See this:

http://msdn.microsoft.com/en-us/library/cc288060(v=vs.85).aspx

It describes how the server must respond with a certain header, Access-Control-Allow-Origin.

answered Dec 11 '11 at 13:25

dnuttle

3,571
2
17
19

Hm. So I see now that this URL does return that header with a value of "*". So that's not it. – dnuttle Dec 11 '11 at 13:26

Access is denied error on XDomainRequest

2 Answers2

Linked

Related