XmlHttpRequest cross-domain

Question

Im trying to make requests to a remote Rest (put method) api

var xhReq = new XMLHttpRequest();
xhReq.open("PUT", "http://api-easybib.apigee.com/2.0/rest/cite", true);
xhReq.setRequestHeader('Content-Type', 'application/json');
var jsonString = "{...}";

xhReq.send(JSON.stringify(jsonString));

var serverResponse = xhReq.responseText;

it fails with

No 'Access-Control-Allow-Origin' header

although i succeeded to make call via rest client browser plugins.

What am i missing?

score 0 · Answer 1 · edited May 23 '17 at 10:31

0

Add the Access-Control-Allow-Origin on your server or use JSONP (see What is JSONP all about?)

edited May 23 '17 at 10:31

Community

1
1

answered Feb 18 '14 at 13:21

spassvogel

3,479
2
18
23

do you mean to the Rest server? – itamar Feb 18 '14 at 13:23
Yes on the REST server you can add the Access-Control-Allow-Origin header. – spassvogel Feb 18 '14 at 13:25
ITs not my server. its a Rest service and i know it support cross-domain as i mentioned – itamar Feb 18 '14 at 13:28
If it supported client side JS cross domain requests then you wouldn't get an error about it not including the header that grants permission to client side JavaScript. – Quentin Feb 18 '14 at 13:36

score 0 · Accepted Answer · answered Feb 18 '14 at 13:52

Because cause security, all browser are not accept a ajax cross-origin request from your site.

In order to browser accept a ajax cross-origin request, server code must set header "Access-Control-Allow-Origin" to response to notify browser that it accept a ajax cross-origin request.

In a browser plugin (ex: chrome app), chrome allow developer config to send request cross-origin. So you can send cross-domain request in REST Client plugin. (http://developer.chrome.com/apps/app_external.html#manifest)

XmlHttpRequest cross-domain

2 Answers2