Cross domain ajax request returning XML: Origin http://... is not allowed by Access-Control-Allow-Origin

Question

This is the piece of jQuery that's not working for me :

$.ajax({
  crossDomain: true,
  type: "POST",
  url: "https://www.testdatasolutions.com/reportgw",

  data: "ACCOUNT=creditreport123&PASSWD=asdj97sdf&PASS=2&PROCESS=PCCREDIT&NAME=Robert+Ice&SSN=891-42-3221&ADDRESS=111+W+8th+St&CITY=Fantasy+Island&STATE=IL&ZIP=60750&BUREAU=TU&PRODUCT=CREDIT&DEFAULTOUTPUT=XML"
})

 .done(function( msg ) {
  alert( "Data Saved: " + msg );
});

The output error says:

XMLHttpRequest cannot load https://www.testdatasolutions.com/reportgw. Origin http://pmr.techforge.us is not allowed by Access-Control-Allow-Origin.

A similar topic can be found here, but it covers only the cases where output is in JSON.

So my question is, is it possible to handle cross domain ajax requests returning XML, or must I absolutely use JSONP?

also, I tried making the request in your example and the server returns an "invalid account" page. Add a error handler to your ajax call to see whats really happening. — Juank, Jan 28 '12 at 17:51

Christofer Eliasson · Accepted Answer · 2012-01-28T17:30:35.577

1

It must be JSONP, XML is not allowed for cross-domain requests by default.

However, with a little server-side programing you could create a proxy and load the data through curl or similar on the server side within your own domain, and output it as XML. That way you can access an url within your own domain instead and you won't have to do a cross-domain request from the client, it is handled "behind the scenes".

edited Jan 28 '12 at 17:30

answered Jan 28 '12 at 17:20

Christofer Eliasson

32,939
7
74
103

score 0 · Answer 2 · answered Jan 28 '12 at 17:20

0

You can try with http://enable-cors.org/. You can check the list of browsers that support CORS at http://en.wikipedia.org/wiki/Cross-Origin_Resource_Sharing#Browser_support.

answered Jan 28 '12 at 17:20

naresh

2,113
20
32

Cross domain ajax request returning XML: Origin http://... is not allowed by Access-Control-Allow-Origin

2 Answers2

Linked