Comments on: Cross Domain XHR with Firefox 2

By: Zach Leatherman

Zach Leatherman — Sun, 10 May 2009 15:58:14 +0000

Again, please keep in mind that this post should be considered deprecated, as it does not apply to the current version of Firefox.

By: Animal

Animal — Sat, 09 May 2009 16:40:27 +0000

Sorry, but NONE of this works.

By: Zach Leatherman

Zach Leatherman — Thu, 12 Feb 2009 17:16:26 +0000

If you’re having trouble modifying your prefs, you probably still have Firefox open. You must close Firefox when editing prefs.js. Also, the above code was tested only with Firefox 2, as stated below the headline.

By: venkat

venkat — Thu, 12 Feb 2009 13:30:52 +0000

Hi,

Many thanks to you. But my firefox doent get updated with the new user prefs. im running 3.0.6. Any clues.

By: Zach Leatherman

Zach Leatherman — Tue, 12 Aug 2008 13:19:10 +0000

Never say die.

http://developer.mozilla.org/en/docs/Cross-Site_XMLHttpRequest

Looks like you could make a plugin that enables this for the web :) Have at it!

By: Sean

Sean — Tue, 12 Aug 2008 12:31:42 +0000

I’ve read that the above technique will not work under Firefox 3. My tests seem to confirm this. And, there’s this thread:

http://groups.google.com/group/mozilla.dev.apps.firefox/browse_thread/thread/0b3db90e1b452f33/d4fd6124df529739

So, is it game over?

By: mark

mark — Wed, 09 Jul 2008 18:46:07 +0000

hi board!

y have this error,
Permiso para obtener la propiedad Element.childNodes denegado

in english
Permission denied to get property Element.childNodes

and i create prefs.js file, and i have this error yet… i am using V 3.0

tks for u help.

By: Zach Leatherman

Zach Leatherman — Wed, 18 Jun 2008 23:24:27 +0000

Sure, this method is a client-side only solution. It’s fairly trivial (and common) to use a server side language to act as a proxy for your ajax calls.

By: Arian Hojat

Arian Hojat — Wed, 18 Jun 2008 15:37:01 +0000

Heard this was a viable production solution:
use php to pull the xml, and feed it into the javascript.

http://www.phpfour.com/blog/2008/03/06/cross-domain-ajax-using-php/

By: Zach Leatherman

Zach Leatherman — Sat, 10 May 2008 19:10:07 +0000

Also, please keep in mind that this is NOT a production solution. It’s a development solution for individual development machines.

By: Zach Leatherman

Zach Leatherman — Sat, 10 May 2008 04:25:00 +0000

Dude, what?

To me that says:
I can parse an XML document.
OR if I can’t, try a new way.

That doesn’t have anything to do with XHR, other than supplying using it to supply an XML document.

By: Jeremy

Jeremy — Fri, 09 May 2008 23:58:20 +0000

If you want to ensure that what you are developing works for other users who will not want to do this to their firefox use this:

try{
// IE understands this
var xml = $(response.responseXML)
var codes = xml.documentElement.getElementsByTagName(“code”)
}catch(e){
//firefox understands this
try{
var xml = (new DOMParser()).parseFromString( response.responseXML, “text/xml”);
var codes = xml.documentElement.getElementsByTagName(“code”)
}catch(ee){
}
}

By: Christian Fecteau

Christian Fecteau — Sat, 16 Feb 2008 03:54:28 +0000

Problem solved. A Firefox search engine xml file has been made for this dictionnary (and more):
http://www.cnrtl.fr/portail/#footerright

By: Christian Fecteau

Christian Fecteau — Sun, 10 Feb 2008 22:30:19 +0000

Shaun or Zach, how would I do the same for UniversalXPConnect? I’m trying to make myself a Firefox favelet that would search this French dictionnary automatically with my clipboard text:
http://atilf.atilf.fr/dendien/scripts/tlfiv4/showps.exe?p=combi.htm

I’m so close but I’m still getting this error:
uncaught exception: Un script de « http://atilf.atilf.fr » s'est vu refuser des privilèges UniversalXPConnect.

I’ve tried these with no luck in user.js:
user_pref("capability.principal.codebase.p0.granted", "UniversalXPConnect"); user_pref("capability.principal.codebase.p0.id", "http://atilf.atilf.fr"); user_pref("capability.principal.codebase.p0.subjectName", "");


user_pref("capability.principal.codebase.p1.granted", "UniversalXPConnect");

user_pref("capability.principal.codebase.p1.id", "http://dell");

user_pref("capability.principal.codebase.p1.subjectName", "");
user_pref("capability.policy.policynames", "allowclipboard");

user_pref("capability.policy.allowclipboard.sites", "file:// http://dell http://atilf.atilf.fr");

user_pref("capability.policy.allowclipboard.Clipboard.cutcopy", "allAccess");

user_pref("capability.policy.allowclipboard.Clipboard.paste", "allAccess");

/* user_pref("capability.policy.allowclipboard.UniversalXPConnect.QueryInterface", "allAccess"); user_pref("capability.policy.allowclipboard.UniversalXPConnect.createInstance", "allAccess"); user_pref("capability.policy.allowclipboard.UniversalXPConnect.equals", "allAccess"); user_pref("capability.policy.allowclipboard.UniversalXPConnect.getService", "allAccess"); user_pref("capability.policy.allowclipboard.UniversalXPConnect.initialize", "allAccess"); */

and my favelet:
function getClipboardText() {


	if (window.clipboardData) // IE

		return (window.clipboardData.getData('Text'));
	if (!window.netscape) // promt for text if not Mozilla

		return prompt();
	// ask permission to Mozilla

	netscape.security.PrivilegeManager.enablePrivilege('UniversalXPConnect');
	// go on with XUL code

	var	clip = Components

			.classes['@mozilla.org/widget/clipboard;1']

			.createInstance(Components.interfaces.nsIClipboard),

		trans = Components

				.classes['@mozilla.org/widget/transferable;1']

				.createInstance(Components.interfaces.nsITransferable),

		str = {},

		len = {};
	trans.addDataFlavor('text/unicode');

	clip.getData(trans, clip.kGlobalClipboard);

	trans.getTransferData('text/unicode', str, len);
	str =	Components.interfaces.nsISupportsWString

		? str.value.QueryInterface(Components.interfaces.nsISupportsWString)

		: str.value.QueryInterface(Components.interfaces.nsISupportsString);
	return(str.data.substring(0, len.value / 2));

}
var clip = getClipboardText();
console.log(clip);
//document.form1.elements.mot.value = clip;

//verif1();

Thanks for the XHR code. I’ve added it to my FF dev profile. Now I can code cross-domain ajax.

By: Zach Leatherman

Zach Leatherman — Thu, 07 Feb 2008 00:27:46 +0000

Great comment Shaun! That will definitely tighten the security up.

By: Shaun

Shaun — Sat, 26 Jan 2008 13:16:15 +0000

Rather than set these preferences on the default profile, set them on a custom one that's only available for your development site:


user_pref("capability.policy.XMLHttpRequestToAnySite.sites", "http://YOURDEVHOSTHERE");
user_pref("capability.policy.policynames", "XMLHttpRequestToAnySite");

Here's the final list I ended up using, which includes a few new ones than the OP:


user_pref("capability.policy.XMLHttpRequestToAnySite.CDATASection.nodeValue", "allAccess");

user_pref("capability.policy.XMLHttpRequestToAnySite.Element.attributes", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Element.childNodes", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Element.firstChild", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Element.getAttribute", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Element.getElementsByTagName", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Element.nodeType", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Element.nodeName", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Element.tagName", "allAccess");

user_pref("capability.policy.XMLHttpRequestToAnySite.HTMLCollection.length", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.HTMLCollection.item", "allAccess");

user_pref("capability.policy.XMLHttpRequestToAnySite.ProcessingInstruction.nodeType", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.ProcessingInstruction.nodeName", "allAccess");

user_pref("capability.policy.XMLHttpRequestToAnySite.Text.nodeType", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Text.nodeName", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Text.data", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.Text.nodeValue", "allAccess");

user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.documentElement", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.getElementsByTagName", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.nodeType", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.nodeName", "allAccess");

user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.channel", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.responseText", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.responseXML", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.send", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.setRequestHeader", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.open", "allAccess");

By: Zach Leatherman

Zach Leatherman — Tue, 30 Oct 2007 22:56:54 +0000

If you read the solution carefully you will see that you can add that exact property to your prefs.js like so:

user_pref(“capability.policy.default.XMLDocument.firstChild”, “allAccess”);

Anytime you get a “Permission denied” exception, this solution should work

By: alberto

alberto — Tue, 30 Oct 2007 10:03:53 +0000

this method works as well but when I need to read the response xml i get this exception:

uncaught exception: Permission denied to get property XMLDocument.firstChild

any solution??
i don’t want to use ie6/7 again for this purpose…