If cross domain ajax calls are not allowed then how are you supposed to do this? Note: obsoleted link. Question updated with relevant section from original page in quest
Cross domain ajax restrictions are only a browser restriction. If you make a webservice call from the server or another application, you won't be restricted. If you need to do an ajax call though, you could proxy the call through your server.