Question

Is there any way to tell your localhost that it can do cross domain ajax calls?

I need this for my testing.

If it is a browser specific issue i am using google chrome.

Cheers.

Answer 1

No, it’s absolutely not possible. If it could be disabled by the user then it would be the main target for anyone with nefarious or dubious intent, and as prone as any other software to exploitation. It’s difficult enough making secure software, without painting on even more attractive targets.

The only way to implement cross-domain Ajax is to route requests via a server-side script.

It’s worth mentioning that there is, perhaps, a glimmer of hope for you: in the form of cross-window messaging with HTML 5 postMessage

It’s probably worth your having a read of some related (though I’m not sure they’re duplicate) questions:

• Why the cross-domain Ajax is a security concern?
• Firefox Cross Domain Request

---

Edited in response to comment:

So you mean have a script that takes the params, adds them to the request, sends it out, and then echos out the response object?

Essentially yes. In picture format:

client  |--------------> | server side |----------------------->  | remote domain
browser | <----ajax------|   script    | <------------------------|--/

---

Edited to add that this is now sort of possible, using Cross-Origin Resource Sharing (CORS); in which a script from one domain sends an Origin HTTP header stating the URL of the page, and the server can respond (if configured to do so) with either an error (if CORS is disabled, or unsupported) or with any requested data.

References:

• CORS compatibility.
• Cross-Origin Resource Sharing, at the W3.org.
• Enable Cross-Origin Resource Sharing.