How to have a local html file make XHR Cross-domain requests in firefox 17?

Question

How do you make XHR cross-domain request in firefox 17+ from a local html file?

• netscape.security.PrivilegeManager.enablePrivilege("UniversalBrowserRead") has been removed
• SpecialPowers.createSystemXHR() doesn't seem to work

I know an extension would work, but I'd rather not have to "add" anything to firefox unless its necessary.

Answer 1

I found the answer. You need to toggle security.fileuri.strict_origin_policy to false by in "about:config". It affects "anything that does same-origin checks, including XMLHttpRequest, XSLT, and XBL."

This also allows reading of local files to a certain extent, so it may cause security issues.