Login Register

Cross Domain XMLHttpRequests using an IFrame Proxy

As of today, the Dojo codebase can do cross domain XMLHttpRequests (XHR) using an iframe proxy. Note that this is not using Flash or a server side proxy -- it is pure JavaScript and HTML. A set of iframes (one local, one cross-domain) are used to serialize the XHR information using URL fragment identifiers. For more information and some examples, see the following page: Cross Domain XMLHttpRequests using an IFrame Proxy (The content of that page will be moved to the Dojo Book once the right place is found for it.)

[...] The Dojo Toolkit can

[...] The Dojo Toolkit can now do cross domain XHR using an iframe proxy. [...]

So the integration with

So the integration with Tapestry has been entirely due to the hard work of the Tapestry team. No code has been added to Dojo to support this integration. We're on friendly terms with members of the Struts team as well, but any such decision would be squarely in their lap. You might consider lobbying them. Regards

[...] On the Dojo Toolkit

[...] On the Dojo Toolkit blog today, there’s a pointer to information about the library’s latest built-in ability - making cross-domain requets using an iFrame proxy. As of today, the Dojo codebase can do cross domain XMLHttpRequests (XHR) using an iframe proxy. Note that this is not using Flash or a server side proxy — it is pure JavaScript and HTML. A set of iframes (one local, one cross-domain) are used to serialize the XHR information using URL fragment identifiers. [...]

[...] They didn’t even use

[...] They didn’t even use the Ajax stuff which is now possible, such as using cross-domain XHR and Flash based arbitrary header re-writes and forgery, which when taken together essentially mean that an attacker has an extremely wide array of vulnerable sites, such as MySpace and others, to send hostile code to your computer to do with as they please. I am certain this is how the malicious mofos behind commercial / organized crime spamming and bot nets will try to infect millions of boxes over the next few years. [...]

[...] Cross Domain

[...] Cross Domain XMLHttpRequests using and IFrame Proxy As of today, the Dojo codebase can do cross domain XMLHttpRequests (XHR) using an iframe proxy. Note that this is not using Flash or a server side proxy — it is pure JavaScript and HTML. A set of iframes (one local, one cross-domain) are used to serialize the XHR information using URL fragment identifiers. [...]

Hi, I read from

Hi, I read from TheServerSide.com "http://www.theserverside.com/news/thread.tss?thread_id=41554" saying that Dojo has been doing the integration with Tapestry. Is there any possibilities/chances that Dojo will be integrating with Spring MVC Framework ?

Going through the

Going through the documentation, I am kind of confused. Is the same-domain web server still routing/proxying the traffic or client(browser) is purely interacting with the cross-domain server? Poor documentation.

[...] Dùng IFrame.

[...] Dùng IFrame. Ä?ây là má»™t kỹ thuật khá phức tạp. Tuy nhiên, Dojo đã cho phép bạn thá»±c hiện Ä‘iá»?u này bằng cách khá đơn giản Ä?ây là giải pháp tương đối toàn vẹn. Nhược Ä‘iểm chính là IFrame sẽ tiêu tốn bá»™ nhá»› cá»§a browser nhưng có lẽ không đáng kể. [...]