I thought cross-subdomain AJAX requests were allowed, but this Chrome error seems to indicate otherwise

Question

I know that cross-domain requests are disallowed for security reasons, but I was under the impression that only the top-level domain needed to match, that different sub-doma

Answer 1

No cross sub domain requests are not allowed in any browser. But there are some ways like CORS, using iframes, setting document.domain to make it work (although with some limitations).