Pages

Wednesday, September 4, 2013

IE10 Cross domain issue - Access Denied error while making xhr call


The IE10 supports CORS fully. 
In some cases user may face "Access denied" while making a xhr call. 
Let me try to explain the scenario where the user will get "Access denied" error-

Before that we should be aware of the two terminology -

Origin : domain hosting the script content
Host : the domain requested by xhr call

Let the Origin in our case be *.adobe.co.uk & Host be *.adobe.com.

Now either both domains should be in the IE10 trusted site domain list or both should not be present in the list. To go to the IE trusted site settings, Go to Internet options -> Security -> Select trusted sites option & click on Sites(button). It will show all the trusted websites (domain)

If one of the Origin/ Host is present in the trusted site domain list, then the user will get Access denied error while making xhr call in the native open method of javascript. for example user will get Access denied error while making xhr call to *.adobe.com from the script hosted/running on *.adobe.co.uk

Cross domain reference link from MS blog -CORS for XHR in IE10

Working cross domain example - Cross-Site Upload
In the cross site upload example -

Origin - http://ie.microsoft.com/
Host - http://html5labs.interoperabilitybridges.com.

If we put either the Origin or Host in the Trusted Sites domain then while making the xhr call, Access Denied error will prevent file upload operation.
Posted by at
Labels: , ,

15 comments:

  1. Maria PashukDecember 23, 2013 at 9:23 AM

    THANK YOU!
    After 2 days of searching and seeing dozens of questions about this problem without answers... the answer is here, and so simple!

    ReplyDelete
    Replies
    1. devmohdDecember 23, 2013 at 9:00 PM

      Good to hear that it helped you.

      Delete
    2. UnknownNovember 8, 2021 at 5:58 AM

      The effectiveness of IEEE Project Domains depends very much on the situation in which they are applied. In order to further improve IEEE Final Year Project Domains practices we need to explicitly describe and utilise our knowledge about software domains of software engineering Final Year Project Domains for CSE technologies. This paper suggests a modelling formalism for supporting systematic reuse of software engineering technologies during planning of software projects and improvement programmes in Final Year Projects for CSE.

      Software management seeks for decision support to identify technologies like JavaScript that meet best the goals and characteristics of a software project or improvement programme. JavaScript Training in Chennai Accessible experiences and repositories that effectively guide that technology selection are still lacking.

      Aim of technology domain analysis is to describe the class of context situations (e.g., kinds of JavaScript software projects) in which a software engineering technology JavaScript Training in Chennai can be applied successfully

      The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training

      Delete
  2. xJanuary 28, 2014 at 3:00 AM

    Thank you! Helped us while performing a critical deployment test at our customer.

    ReplyDelete
    Replies
    1. devmohdJanuary 30, 2014 at 4:20 AM

      Glad that it helped you during your deployment !!!

      Delete
  3. UnknownMay 5, 2014 at 6:09 AM

    Hey, great blog, but I don’t understand how to add your site in my rss reader. Can you Help me please? video streaming

    ReplyDelete
    Replies
    1. devmohdMay 17, 2014 at 11:24 PM

      Thanks Calvin.
      You can add the following URL is your RSS feed to get the update from the blog - http://devmohd.blogspot.com/feeds/7345933586904079584/posts/default?alt=rss

      Delete
  4. devmohdMay 17, 2014 at 11:24 PM

    This comment has been removed by the author.

    ReplyDelete
  5. karakkambiJune 13, 2014 at 5:26 AM

    Awesome bro... this is the single place where a real solution to this issue is discussed.

    ReplyDelete
  6. UnknownOctober 23, 2014 at 9:20 AM

    Yes, but how to get around this?
    How is it that adding a domain to TRUSTED SITES, dammit, produces "access denied" error?
    This is as counter-intuitive as it gets!

    ReplyDelete
  7. UnknownDecember 23, 2014 at 5:48 AM

    Alliluya!

    ReplyDelete
  8. BloggerDecember 26, 2016 at 7:25 PM

    Bluehost is ultimately one of the best hosting company with plans for any hosting needs.

    ReplyDelete
  9. NicheExpertSeptember 17, 2018 at 3:26 AM

    No matter if you admit it or not, the world of technology is changing at a rapid pace. One of the problems of this change is not knowing who is calling you and why. This could happen because you misplaced your address book, may be you have a lot of free phonecalls that you may receive or you might want to know where your kids are calling from.

    ReplyDelete
  10. شركة لمسات الابداعJanuary 31, 2022 at 2:12 AM

    شركة فنون المثالية للخدمات المنزلية
    شركة كشف تسربات المياه بالجبيل
    شركة كشف تسربات المياه بالقطيف
    شركة كشف تسربات المياه بالدمام
    شركة كشف تسربات المياه بالاحساء

    ReplyDelete

Subscribe to: Post Comments (Atom)