AJAX calls from local javascript code to remote server

Question

Is it possible to make AJAX-calls (e.g. using jQuery.ajax() ) from local html/js file (e.g. file://home/a.html) to the remote server (e.g. http://domain:8080/api)? If yes, how to enable such XSS (e.g. in FF3)?

I suppose it's some browser's security settings, but can't find which ones.

And suppose there is an answer without any server-side changes (such as JSONP).

Thanks.

Code snippet:

function foo(){
       $.ajax({
           type: "POST",
           url: "http://localhost:8080/api",
           data: "Hello world",
           success: function (data, textStatus, XMLHttpRequest) {
               alert(data);
               alert("success!");
           },
           error: function(XMLHttpRequest, textStatus, errorThrown) {
               alert("fail");
           }
       });
   }

...
...

<button onclick="foo()">click me</button>

I'm getting "success" but empty data.

please detail, if domain:8080 is your server? i.e. the one you could configure — zindel, Apr 13 '11 at 11:44
yes, but I suppose there is an answer without any server-side changes (such as JSONP). — Nikolay Vyahhi, Apr 13 '11 at 11:46
There is no any settings required..please post your code so we can help you... — Kishan Gajjar, Apr 13 '11 at 11:47

score 3 · Accepted Answer · answered Apr 13 '11 at 12:25

3

Unfortunately, there are no other ways but use one of 2 methods: either JSONP as stated in previous answers or CORS. Both require server-side changes. JSONP is better if you need older browser's support, but CORS is obviously cleaner and likely doesn't require server-side scripts changes, modifying server configuration should be enough.

Hope this helps.

answered Apr 13 '11 at 12:25

zindel

1,837
11
13

1

Hi zindel, could you specify how exactly one should configure Apache to be able to reach content served by it from a local file using AJAX? – YakovL Apr 15 '16 at 08:16

score 0 · Answer 2 · answered Apr 13 '11 at 11:51

0

Add callback=? at the end of your url which you passing to ajax

answered Apr 13 '11 at 11:51

jimy

4,848
3
35
52

I suppose there is an answer without any server-side changes (such as JSONP). – Nikolay Vyahhi Apr 13 '11 at 11:59

score 0 · Answer 3 · edited May 23 '17 at 12:00

0

JSONP is the way to go. If you are accessing a third party API, hopefully it will already support it. If it is your own API, you might have to add support for it yourself. You might find this related question helps you get some background: What is JSONP all about?

edited May 23 '17 at 12:00

Community

1
1

answered Apr 13 '11 at 11:57

Richard

4,740
4
32
39

AJAX calls from local javascript code to remote server

3 Answers3

Linked