ajax request to different host

Question

i have the following javascript in my webpage:

var xhr = new XMLHttpRequest();
xhr.open(\'GET\', \'http://www.google.com\', true);
xhr.onreadystatechange = funct         


        

Answer 1

Cross-site scripting is a common way of injecting code into someone else's web page. To limit this, most browsers now stop the client-side developer from creating a JavaScript request (typically through XMLHttpRequest) to web pages located on a different domain to the original page.

You can get around this simply by creating a dummy script on your domain that forwards the same request to the page you actually want. For example, in your case, you would create a request to http://mydomain.com/google.php (or whatever scripting language you prefer), which would then download the Google page using file_get_contents or similar and simply echo it out.