Cross Domain XHR with Firefox

1. alberto 10.30.07 / 4am

   this method works as well but when I need to read the response xml i get this exception:

   uncaught exception: Permission denied to get property XMLDocument.firstChild

   any solution??
   i don’t want to use ie6/7 again for this purpose…
2. Zach Leatherman 10.30.07 / 4pm
   If you read the solution carefully you will see that you can add that exact property to your prefs.js like so:

   user_pref(”capability.policy.default.XMLDocument.firstChild”, “allAccess”);

   Anytime you get a “Permission denied” exception, this solution should work
3. Shaun 01.26.08 / 7am

   Rather than set these preferences on the default profile, set them on a custom one that’s only available for your development site:
   
user_pref("capability.policy.XMLHttpRequestToAnySite.sites", "http://YOURDEVHOSTHERE");
user_pref("capability.policy.policynames", "XMLHttpRequestToAnySite");


   Here’s the final list I ended up using, which includes a few new ones than the OP:

   
user_pref("capability.policy.XMLHttpRequestToAnySite.CDATASection.nodeValue", "allAccess");

   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.attributes", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.childNodes", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.firstChild", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.getAttribute", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.getElementsByTagName", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.nodeType", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.nodeName", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Element.tagName", "allAccess");

   user_pref("capability.policy.XMLHttpRequestToAnySite.HTMLCollection.length", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.HTMLCollection.item", "allAccess");

   user_pref("capability.policy.XMLHttpRequestToAnySite.ProcessingInstruction.nodeType", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.ProcessingInstruction.nodeName", "allAccess");

   user_pref("capability.policy.XMLHttpRequestToAnySite.Text.nodeType", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Text.nodeName", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Text.data", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.Text.nodeValue", "allAccess");

   user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.documentElement", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.getElementsByTagName", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.nodeType", "allAccess");
   user_pref("capability.policy.XMLHttpRequestToAnySite.XMLDocument.nodeName", "allAccess");

   user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.channel", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.responseText", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.responseXML", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.send", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.setRequestHeader", "allAccess");
user_pref("capability.policy.XMLHttpRequestToAnySite.XMLHttpRequest.open", "allAccess");

4. Zach Leatherman 02.06.08 / 6pm
   Great comment Shaun! That will definitely tighten the security up.
5. Christian Fecteau 02.10.08 / 4pm

   Shaun or Zach, how would I do the same for UniversalXPConnect? I’m trying to make myself a Firefox favelet that would search this French dictionnary automatically with my clipboard text:
   http://atilf.atilf.fr/dendien/scripts/tlfiv4/showps.exe?p=combi.htm

   I’m so close but I’m still getting this error:
   uncaught exception: Un script de « http://atilf.atilf.fr » s’est vu refuser des privilèges UniversalXPConnect.

   I’ve tried these with no luck in user.js:
   user_pref("capability.principal.codebase.p0.granted", "UniversalXPConnect");
user_pref("capability.principal.codebase.p0.id", "http://atilf.atilf.fr");
user_pref("capability.principal.codebase.p0.subjectName", "");

   user_pref("capability.principal.codebase.p1.granted", "UniversalXPConnect");
   user_pref("capability.principal.codebase.p1.id", "http://dell");
   user_pref("capability.principal.codebase.p1.subjectName", "");

   user_pref("capability.policy.policynames", "allowclipboard");
   user_pref("capability.policy.allowclipboard.sites", "file:// http://dell http://atilf.atilf.fr“);
   user_pref(”capability.policy.allowclipboard.Clipboard.cutcopy”, “allAccess”);
   user_pref(”capability.policy.allowclipboard.Clipboard.paste”, “allAccess”);

   /*
user_pref(”capability.policy.allowclipboard.UniversalXPConnect.QueryInterface”, “allAccess”);
user_pref(”capability.policy.allowclipboard.UniversalXPConnect.createInstance”, “allAccess”);
user_pref(”capability.policy.allowclipboard.UniversalXPConnect.equals”, “allAccess”);
user_pref(”capability.policy.allowclipboard.UniversalXPConnect.getService”, “allAccess”);
user_pref(”capability.policy.allowclipboard.UniversalXPConnect.initialize”, “allAccess”);
*/


   and my favelet:
   function getClipboardText() {

   if (window.clipboardData) // IE
   return (window.clipboardData.getData('Text'));

   if (!window.netscape) // promt for text if not Mozilla
   return prompt();

   // ask permission to Mozilla
   netscape.security.PrivilegeManager.enablePrivilege('UniversalXPConnect');

   // go on with XUL code
   var clip = Components
   .classes['@mozilla.org/widget/clipboard;1']
   .createInstance(Components.interfaces.nsIClipboard),
   trans = Components
   .classes['@mozilla.org/widget/transferable;1']
   .createInstance(Components.interfaces.nsITransferable),
   str = {},
   len = {};

   trans.addDataFlavor('text/unicode');
   clip.getData(trans, clip.kGlobalClipboard);
   trans.getTransferData('text/unicode', str, len);

   str = Components.interfaces.nsISupportsWString
   ? str.value.QueryInterface(Components.interfaces.nsISupportsWString)
   : str.value.QueryInterface(Components.interfaces.nsISupportsString);

   return(str.data.substring(0, len.value / 2));
   }

   var clip = getClipboardText();

   console.log(clip);

   //document.form1.elements.mot.value = clip;

   //verif1();

   Thanks for the XHR code. I’ve added it to my FF dev profile. Now I can code cross-domain ajax.
6. Christian Fecteau 02.15.08 / 9pm

   Problem solved. A Firefox search engine xml file has been made for this dictionnary (and more):
   http://www.cnrtl.fr/portail/#footerright
7. Jeremy 05.09.08 / 5pm

   If you want to ensure that what you are developing works for other users who will not want to do this to their firefox use this:

   try{
   // IE understands this
   var xml = $(response.responseXML)
   var codes = xml.documentElement.getElementsByTagName(”code”)
   }catch(e){
   //firefox understands this
   try{
   var xml = (new DOMParser()).parseFromString( response.responseXML, “text/xml”);
   var codes = xml.documentElement.getElementsByTagName(”code”)
   }catch(ee){
   }
   }
8. Zach Leatherman 05.09.08 / 10pm
   Dude, what?

   To me that says:
   I can parse an XML document.
   OR if I can’t, try a new way.

   That doesn’t have anything to do with XHR, other than supplying using it to supply an XML document.
9. Zach Leatherman 05.10.08 / 1pm
   Also, please keep in mind that this is NOT a production solution. It’s a development solution for individual development machines.
10. Arian Hojat 06.18.08 / 9am

    Heard this was a viable production solution:
    use php to pull the xml, and feed it into the javascript.

    http://www.phpfour.com/blog/2008/03/06/cross-domain-ajax-using-php/
11. Zach Leatherman 06.18.08 / 5pm
    Sure, this method is a client-side only solution. It’s fairly trivial (and common) to use a server side language to act as a proxy for your ajax calls.
12. mark 07.09.08 / 12pm

    hi board!

    y have this error,
    Permiso para obtener la propiedad Element.childNodes denegado

    in english
    Permission denied to get property Element.childNodes

    and i create prefs.js file, and i have this error yet… i am using V 3.0

    tks for u help.
13. Sean 08.12.08 / 6am

    I’ve read that the above technique will not work under Firefox 3. My tests seem to confirm this. And, there’s this thread:

    http://groups.google.com/group/mozilla.dev.apps.firefox/browse_thread/thread/0b3db90e1b452f33/d4fd6124df529739

    So, is it game over?
14. Zach Leatherman 08.12.08 / 7am
    Never say die.

    http://developer.mozilla.org/en/docs/Cross-Site_XMLHttpRequest

    Looks like you could make a plugin that enables this for the web :) Have at it!

Add Technorati Favorite | Powered by Hemingway flavored Wordpress.

Entries RSS Comments RSS