jQuery Ajax Cross-site scripting -

-

i know question has been asked (many times) before still can't seem right.

i want perform ajax request in jquery , "arbitrary" contents - e.g. may html, text, json, img

when perform following infamous no 'access-control-allow-origin' header present on requested resource. origin 'http://mydomain.com' therefore not allowed access. 

$.ajax({             url: "http://www.pureexample.com/jquery/cross-domain-ajax.html",             // datatype: "jsonp",             crossdomain: true,                success: function (data) {                         console.log('success');                          console.log(data);             },             error: function(request, status, error) {                     console.log('error on request. ' + request.responsetext);                     alert('error on request. ' + request.responsetext);                 }         });

i not serving data, cannot on server-side allow cross domain request. believe specifying jsonp (commented out) assumes json being returned? or without it, not work.

so, bottom line - there "simple" way to cross-domain request may result , insert tag (e.g. html div)

any help, or further explanation appreciated.

thanks. rob

i had problem while ago, when using external webservice retrieve brazilian's zip code data (address , such). and used same method did.

there few points need stressed out:

1) ajax not allow security protocol differences. means that, if page secured behind secure protocol (https), browser not allow external server return through unsecured 1 (http). (i found late in development, , result use .net's webrequest )

2) setting datatype "jsonp" doesn't transform response json. allows received such.

3) jsonp only datatype acceptd cross-domain requests. error message described due reason.

so, summarize:

when talking cross-domain requests ajax,"arbitrary" contents restricted json(p). , data received must json.

also, until jquery 1.5, if response not correctly typed json, no errors raised .

i wish had known these issues before started development... uploading component production servers unbeknownst of fact requesting data stored within http ssl-layered servers quite embarassment. ... (though still quite predictable, actually)

for more info : http://api.jquery.com/jquery.ajax/


Comments

Post a Comment

Popular posts from this blog

c++ - OpenCV Error: Assertion failed <scn == 3 ::scn == 4> in unknown function, -

-
i read alot other solution still confused should mine... #include <opencv2/objdetect/objdetect.hpp> #include <opencv2/highgui/highgui.hpp> #include <opencv2/imgproc/imgproc.hpp> #include <iostream> #include <stdio.h> using namespace std; using namespace cv; int main(int argc, const char** argv) { //create cascade classifier object used face detection cascadeclassifier face_cascade; //use haarcascade_frontalface_alt.xml library face_cascade.load("haarcascade_frontalface_alt.xml"); //setup video capture device , link first capture device videocapture capturedevice; capturedevice.open(0); //setup image files used in capture process mat captureframe; mat grayscaleframe; //create window present results namedwindow("outputcapture", 1); //create loop capture , find faces while (true) { //capture new image frame capturedevice >> captureframe; ...
Read more

php - render data via PDO::FETCH_FUNC vs loop -

-
i've been using 2 methods render data. the first one: function name($id,$name){ return '<div id="'.$id.'">'.$name.'</div>'; } echo implode($pdo->query("select id,name user")->fetchall(pdo::fetch_func,'name')); the second one: $users = $pdo->query("select id,name user")->fetchall(pdo::fetch_obj); foreach($users $user){ echo name($user->id,$user->name); } i don't understand how pdo::fetch_func works. tried figure out. however, not well-documented. could please explain fetch mode? , also, 1 performs better? thank you. both methods wrong , have learn how use templates , how separate business logic presentation logic. $users = $pdo->query("select id,name user")->fetchall(pdo::fetch_obj); tpl::assign('users', $users); is code business logic part. then in template <?php foreach $users $row): ?> <div id="<?=$...
Read more

The canvas has been tainted by cross-origin data in chrome only -

-
uncaught securityerror: failed execute 'getimagedata' on 'canvasrenderingcontext2d': canvas has been tainted cross-origin data i getting above error in chrome. code(following) works fine in mozilla. have not corss domain issue. why above error in chrome? var wheel_canvas, wheel_context, can_w, can_h, wheel_grd; var large_radius = 160; var small_radius = 120; var wheel_canvas = document.getelementbyid('wheel_canvas'); var wheel_context = wheel_canvas.getcontext('2d'); var can_w = $(wheel_canvas).width(); var can_h = $(wheel_canvas).height(); var centerx = can_w / 2, centery = can_h / 2; var wheel_grd = null; test('#ff0000'); function test(hex) { $('#clrpicker').css({'left': 210, 'top': 210 }); inverted = hexbw(hex); $('#color_val_show').val(hex); current_color_hex_val_selected = hex; $('#color_val_show').css({'color':inverted,'background':hex}); fillgradient...
Read more