Anyway to bypass same origin policy?

Question

I just wanted to know if their was a way to get the page source of a domain which has the same origin policy? I have tried anyorigin, but my problem is that I am not authenticated into twitter by default. I would really appreciate the help! My code is below:

var request = new XMLHttpRequest();
request.open("GET", "https://twitter.com/", false);
request.send();
var sc = request.response;

Thank you. Thank you. Thank you. I used the reverse proxy method on my apache server and it worked perfectly :D. — AMDLiquidify, Mar 02 '15 at 00:54

score 1 · Accepted Answer · answered Mar 02 '15 at 00:49

No, there is not. It would not be much of a security measure if it could be circumvented. If you want to access Twitter data, use their API.

Actually, there is a workaround that is possible: since same origin policy only affects clients, you can ask your server to fetch it for you. However, most sites that provide API frown on unauthenticated scraping, and might blacklist your site. Specifically, by Twitter ToS:

however, scraping the Services without the prior consent of Twitter is expressly prohibited

EDIT: The link by Skizo is excellent. But while it lists many ways to deal with the policy, none except serverside proxying will help you circumvent the policy on a non-cooperating third-party site.

Anyway to bypass same origin policy?

1 Answers1