Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 5 of 5
  1. #1
    New to the CF scene
    Join Date
    May 2005
    Location
    Richmond, VA
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Security question with XmlHttp

    I'm developing a somewhat complex application that uses XmlHttpRequest and I've noticed a security warning when moving the application into a testing environment. When the application is on my local system, I don't get the message. However, once I move the "backend" piece to the dedicated server and try to run the client from my machine, I get a generic question from IE:

    "This page is accessing information that is not under its control. This poses a security risk. Do you want to continue?"

    I understand why I'm getting the question, but I'm wondering if there is anyway I can get around it. I don't want to freak out my users because I'm accessing data on a different machine in my domain through JavaScript. Thanks in advance.

  • #2
    Regular Coder
    Join Date
    May 2005
    Location
    Michigan, USA
    Posts
    566
    Thanks
    0
    Thanked 0 Times in 0 Posts
    If you are accessing a different machine this is the error. There is no way around it. It only doesnt display the error if you are running it from the same machine as the host. By the specs IE is not even suppoed to allow this action. But it does with a flimsy warning!

  • #3
    jkd
    jkd is offline
    Senior Coder jkd's Avatar
    Join Date
    May 2002
    Location
    metro DC
    Posts
    3,163
    Thanks
    1
    Thanked 18 Times in 18 Posts
    If this is an IE-only application (do note that Opera 8, Safari, and Mozilla all support XMLHttpRequest), then try saving the file as .hta instead of .html.

  • #4
    New to the CF scene
    Join Date
    May 2005
    Location
    Richmond, VA
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by jkd
    If this is an IE-only application (do note that Opera 8, Safari, and Mozilla all support XMLHttpRequest), then try saving the file as .hta instead of .html.
    Yeah, because of VML, it's an IE only application. We're looking into SVG but the plugin aspect kinda sucks. Will try your suggestion tomorrow. Thanks.

  • #5
    jkd
    jkd is offline
    Senior Coder jkd's Avatar
    Join Date
    May 2002
    Location
    metro DC
    Posts
    3,163
    Thanks
    1
    Thanked 18 Times in 18 Posts
    Opera 8 and Firefox 1.1 both offer native SVG support, via XML namespaces.


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •