IE 8.0 Supports Cross-Domain Requests
Zen Master: Want hotdog with everything. HotDog Stand Owner: OK Buddy, here ya go. That'll be $20.00. Zen Master: Here twenty dollar bill. HotDog Stand Owner: That'll do it, pal. Have a great day! Zen Master: What about change? HotDog Stand Owner: Ah, change... must come from within! This is an area where I (and many others) have been quite vocal in complaining. If you can point the src property of a <script... tag at another domain, and said script can basically do anything it wants, then why can't you make an XmlHttpRequest to another domain (other than the one from which the page emanated)? It's certainly an inconsistent application of the notion of security, at a minimum. So in Internet Explorer 8.0 you have the new IHTMLXDomainRequest Interface. Here's how it works, in a nutshell: Cross-domain requests ("XDR", for short) require mutual consent between the webpage and the server. You can initiate a cross-domain request in your webpage by...