CODEWITHSUNDEEP
ajax
Eastern Monk
Eastern Monk

Reputation: 6655

Who blocks cross domain AJAX request browser or webserver or both?

Cross domain AJAX requests are reported as "aborted" in firebug. I know this is supposed to be security feature but where exactly these requests get rejected ? At the browser end or at the server end ?

Upvotes: 4

Views: 708

Answers (1)

Piskvor left the building
Piskvor left the building

Reputation: 92792

Browser - they don't get sent at all. If you check your HTTP traffic (e.g. using Fiddler), you'll see that there is no corresponding HTTP request initiated for those aborted AJAX requests.

(That is also the only place where such blocking makes sense, as the server doesn't have a reliable way to distinguish between AJAX requests and normal requests; only the browser has enough context to make such decision.)

Upvotes: 4

Related Questions