cross domain javascript

Question

I have a web page on domain xyz.com that has a javascript being downloaded from cdn domain cdn.xyz.com. Does the browser consider calling a service on xyz.com (xyz.com/service.svc) from the javascript a cross domain call since js is downloaded from cdn.xyz.com?

If yes, Can the javascript on cdn.xyz.com call a service on xyz.com without having the service to return jsonp?

Which domain is considered by the browser on making a service call from javascript? Is it the domain the javascript is downloaded from or the domain of the primary request?

that would not be considered cross domain, AFAIK

Mikey G
– Mikey G

2012-02-14 21:56:27 +00:00
Commented Feb 14, 2012 at 21:56 — Mikey G
– Mikey G, Commented Feb 14, 2012 at 21:56

Darin Dimitrov · Accepted Answer · 2012-02-14 22:01:01Z

7

Does the browser consider calling a service on xyz.com (xyz.com/service.svc) from the javascript a cross domain call since js is downloaded from cdn.xyz.com?

No. The origin domain is the domain from which originated the HTML that referenced the javascript. It doesn't matter from which domain does this javascript came.

Just think for a second if the contrary was true. Google CDN wouldn't even exist for jQuery since you would be able to send AJAX requests only to http://google.com which kinda restricts the number of applications.

Which domain is considered by the browser on making a service call from javascript?

In your specific example that would be http://xyz.com. So you can perfectly fine send AJAX requests to http://xyz.com even if your javascript file was referenced from http://cdn.xyz.com.

edited Feb 14, 2012 at 22:01

answered Feb 14, 2012 at 21:55

Darin Dimitrov

1.0m275 gold badges3.3k silver badges3k bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Kunal Ranglani Over a year ago

Would it be possible to call the service on cdn.xyz.com from javascript so that the output is cached on cdn. Would this be a cross domain service call or is it ok because its just a sub domain

Darin Dimitrov Over a year ago

@KunalRanglani, no, that's not possible. It's considered cross domain.

Collectives™ on Stack Overflow

cross domain javascript

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related