Enable cross-domain request wihout using JSONP

Question

Possible Duplicate:
Ways to circumvent the same-origin policy

Is it possible to enable cross-domain requests with jQuery, without using JSONP?

Probably unrelated, but you can make use of the `script` tag as well. — web-nomad, Oct 10 '12 at 08:56
Whether those are enabled is mostly a serverside problem? What exactly are you asking for, why do you expect to need jQuery? — Bergi, Oct 10 '12 at 08:58
No as far as I know. See [here](http://en.wikipedia.org/wiki/Same_origin_policy). — Alberto De Caro, Oct 10 '12 at 08:58
@Gidon: In which environment does your jQuery run, in the browser? Does the targeted server support CORS? — Bergi, Oct 10 '12 at 09:07

score 2 · Accepted Answer · edited May 23 '17 at 11:56

2

You can, by settings this inside jquery.

jQuery.support.cors = true;

This enables you to do cross domain calls with jQuery. It's probably not the best solution, since you are adding a vulnerability by using the following request header: Access-Control-Allow-Origin. I would recommend to see if JSONP is still an option, this option is preferred.

See this post for more information: Making a post request from a sinatra app to a rails app

edited May 23 '17 at 11:56

Community

1
1

answered Oct 10 '12 at 08:54

Rob Angelier

2,335
16
29

Isn't that automatically set by jQuery? – Bergi Oct 10 '12 at 09:00
@Bergi no, you have to set it manual in some cases. See the official documentation: http://api.jquery.com/jQuery.support/ – Rob Angelier Oct 10 '12 at 09:00
Only if it is not detected, but usually you don't need to. You will need to set it explicitly if the environment supports cross-domain-requests without CORS – Bergi Oct 10 '12 at 09:04
@Bergi yeah, in his case i think this is the best option so he can assure it's enabled. – Rob Angelier Oct 10 '12 at 09:05

score 0 · Answer 2 · answered Oct 10 '12 at 08:58

0

yes you should use the header Header set Access-Control-Allow-Origin *

then you can use jsonp. the server should respond to with padding that you have giving in your callback .

you can also use the header header("Access-Control-Allow-Origin: *");(php sccript) on server side

answered Oct 10 '12 at 08:58

Arun Killu

13,581
5
34
61

Huh? CORS is different from JSONP – Bergi Oct 10 '12 at 09:01
yes jsonp is dynamic injection of js – Arun Killu Oct 10 '12 at 09:17
…and does not need any headers, yes. – Bergi Oct 10 '12 at 09:32

Enable cross-domain request wihout using JSONP

2 Answers2