Re: [Xsltforms-support] sending xsltforms submission to PayPal for processing - possible?
Brought to you by:
alain-couthures
From: COUTHURES A. <ala...@ag...> - 2010-04-18 20:54:25
|
Hi Alexander, > I guess I do not understand where the "...cross-domain restriction..." > comes from. As a consequence I do not understand how to use "...GET > method instead with xforms:load..." > For security reasons, pure Javascript instructions cannot be used to exchange data with a server not been in the same domain and same port. This is the "cross-domain restriction" implemented in XmlHttpRequest. There are workarounds based on HTML tricks, one of them being using SCRIPT element with @src passing parameters in the query string while Javascript instructions returned by this other server call a callback function... xforms:load is not implemented with XmlHttpRequest in XSLTForms but with location.href so the cross-domain restriction is not to be considered in this case. > URL rewriting - again - due to not understanding why/where is the form > failing now, I can't comment. > URL rewriting allows to trick the client browser in a sense that it believes that the request URL will be treated by the targeted server but, using URL rewriting, this one just sends the request to another one in a different domain. There is no security restriction there because it's performed at server-side. Hope it helps! -Alain |